last executing test programs: 7m12.658211965s ago: executing program 2 (id=839): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 7m12.424699785s ago: executing program 2 (id=842): mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f05ebbee1, 0x2010, 0xffffffffffffffff, 0xffffd000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x2ca0, @private2, 0x80000000}}}, 0x32) 7m12.242888013s ago: executing program 2 (id=846): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}, @float={0xf, 0x0, 0x0, 0x10, 0xc}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x5, 0x1}, {0xe, 0x5}, {0x8, 0x1}, {0x2, 0x1}, {0xd, 0x1}, {0x6}, {0xe, 0x5}, {0x1, 0x5}]}, @var={0x1, 0x0, 0x0, 0xe, 0x3}, @enum64={0xb, 0x8, 0x0, 0x13, 0x1, 0x7, [{0x6, 0x6, 0xfffffffc}, {0xd, 0x8, 0x100}, {0x9, 0x1, 0x7}, {0x7, 0xa7, 0xd}, {0x9, 0x1, 0x15}, {0x6, 0xf6, 0x7}, {0x6, 0x0, 0x3}, {0x1, 0x10000, 0x25a}]}]}, {0x0, [0x5f, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000180), 0x116, 0x0, 0x1, 0x3, 0x10000}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0x100000001, 0x1, 0x7}) r3 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f00000002c0)={'veth1_to_bond\x00'}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000001540)={&(0x7f0000000300)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000340)="515038090f", 0x5}, {&(0x7f0000000380)="b63667ca6ffafafa744f", 0xa}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="a37b425b4ab402adb45a492d06808213058d02b46f1e652054d7c9dd87dc9c61f4e401dc467ca0ab733c8198a18fa82b1f172166eb69fdab338d3f1ce55d426b6c6623379e35f70e5e18ab4920d9a9c5efba07cd65e2d8ba8a3c6bac36315870fb1fb69ded9a7d89bffd060b99c70ed49359ddecd300d625a3a972c43671e30fc58dea8724b5cc26583691146c42960f06f46fe2503cedce4103e95584dbaee061c869441edb4cf983cb330c0c620545e86a036e22780446bcaf00", 0xbb}], 0x4, &(0x7f00000014c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x101}}, @init={0x18, 0x84, 0x0, {0x5, 0x2, 0xfffe, 0xab}}, @init={0x18, 0x84, 0x0, {0x3, 0x1, 0x80, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0x60, 0x4}, 0x44) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000001580)=0x4) r6 = accept4(r4, &(0x7f00000015c0), &(0x7f0000001640)=0x80, 0x800) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x160, 0x1, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CT={0x78, 0xb, 0x0, 0x1, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x26}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_PAYLOAD={0x8d, 0xa, "c522067b4ac741c1bdf9925412a92a6c4d34a674d7396aa1750d925948027c2f567185d05f0a16ec9967f17ae8377869b233f357729ae0cfa2e0e0904e28ff4a4f8f10204c7557b5efba481b591c6326fb63e5bb4e4681e7060a7736858c5f895aab7c8e9bf77f71119ef71e0e58cbbc989adc9f57fdbc7ec5248a8c2968712fc8b67fda1aafc605ef"}]}, 0x160}, 0x1, 0x0, 0x0, 0x40010}, 0x11) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000018c0), &(0x7f0000001900)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000001940)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x2, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x18) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000001980)={0x69}) connect$qrtr(r6, &(0x7f00000019c0)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000001a00)=0xa23e5593a5887441) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt(r8, 0xf5dd, 0x5, &(0x7f0000001a40)="b7371497503eb15e240ea56581ba1f0b1f52197119968c4575b77ccc573ce61326c92165f87618846dda91c631610ab949c7ce943b2e6c7d06852f09843cefe81b09ba817543ae35dcf013703075afc02cec683a", 0x54) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001ac0)=0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000001b00)={0x0, 0x9, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001f00)={{r4}, r9, 0x0, @unused=[0xd017, 0x0, 0xffffffffffffffff, 0xd6b2], @devid=r10}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000002f00)=0x6, 0x4) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) 7m12.064923753s ago: executing program 2 (id=850): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "cc320e4a27cb5791", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x10, 0x6, 0x558, 0x428, 0x428, 0x310, 0xe8, 0x428, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x2e95058f, @ipv4=@broadcast, 0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'batadv0\x00', 'pimreg0\x00', {0xff}, {}, 0xc, 0x2, 0x7, 0xc}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2, 0x0, 0x7c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40), 0x0, 0x4004010) 7m11.926434403s ago: executing program 2 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000980)='connect aa:aa:aa:aa:aa:10 2', 0x1b) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000140)="fa", 0x1) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0x80004f, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0x80004f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b00000412000010000a80050008000300000014003500776731000000000000c666e2d38726fe94cc0a2b925fded6b7c142ee3fdb54954be2a86d89bd2b0c02f74b75bad56ccef5e6c9c36056c0c390978efa94700e1a3d75e1d9384bbb83f85e8bbf775e2d"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) (async) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) sendmmsg(r4, &(0x7f0000006000)=[{{&(0x7f00000000c0)=@can={0x1d, r5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="847b311eef782b3fe4", 0x9}], 0x1}}], 0x1, 0x20000810) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x2, {0x0, 0x0, 0x3}, 0xfe}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x2, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) 7m11.646467431s ago: executing program 2 (id=856): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r1, 0x5e702000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x2, 0x0, 0x1}, {0x9}]}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x38}}, 0x0) 7m11.250952544s ago: executing program 32 (id=856): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r1, 0x5e702000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x2, 0x0, 0x1}, {0x9}]}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x38}}, 0x0) 19.19545706s ago: executing program 3 (id=3006): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket(0x10, 0x803, 0x0) (async) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) (async) r5 = accept4$inet6(r4, 0x0, &(0x7f00000000c0), 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000500000000"], 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 18.061172388s ago: executing program 3 (id=3009): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r6, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x3fffffffffffd14, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000005c0)={0x7, 0x200, 0x200, 0x9, 0x2, 0x9, 0x8, 0x4, 0x0}, &(0x7f0000000600)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000640)={r7, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, [0x2, 0x80, 0xfff, 0x1, 0x3, 0x1, 0x0, 0xfffffffffffffff4, 0xb, 0x0, 0x10001, 0xc, 0x1, 0x7, 0x8]}, &(0x7f0000000740)=0x100) 17.674024342s ago: executing program 3 (id=3015): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) (async) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) (async) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xba, &(0x7f0000000340)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x1c, 0x4, 0x0, 0x3e, 0xac, 0x0, 0xe000, 0x22, 0x11, 0x0, @empty, @empty, {[@ssrr={0x89, 0x3, 0x55}, @timestamp_prespec={0x44, 0x4c, 0x3a, 0x3, 0x9, [{@remote, 0x3}, {@loopback, 0x75c}, {@remote, 0x3b4c}, {@loopback, 0x7}, {@loopback, 0x9}, {@multicast1, 0xf5c}, {@remote, 0x3719}, {@rand_addr=0x64010101, 0x1da}, {@private=0xa010101, 0x8000}]}, @timestamp_addr={0x44, 0xc, 0xc5, 0x1, 0x7, [{@loopback, 0x2}]}]}}, {0x0, 0x0, 0x3c, 0x0, @opaque="ae87490ce97a93d62fcb4444d79df0bdf6d5a20310abf827452ec16974b00e958d1b0c72d9c1dfc92ac13c4de54ae6da1f370931"}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fc"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x20008854) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) (async) write$bt_hci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000006911ba000000000007cd8bf4000000009500000c00000000bcf4e4a30e96c21600f4afb6d0954c68c0dec1952d9a030799aef4b1eafe1013bc52ccd2f43ec4e670e61e78bc8db65c0dc1492bcb"], &(0x7f00000001c0)='syzkaller\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x7}, 0xfffffeb0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000006911ba000000000007cd8bf4000000009500000c00000000bcf4e4a30e96c21600f4afb6d0954c68c0dec1952d9a030799aef4b1eafe1013bc52ccd2f43ec4e670e61e78bc8db65c0dc1492bcb"], &(0x7f00000001c0)='syzkaller\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x7}, 0xfffffeb0}, 0x94) 16.503732543s ago: executing program 3 (id=3020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001300310327bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e5460200016004001400030076657468305f746f5f7465616d0000000500270026f7ffff0b001a"], 0x48}, 0x1, 0x0, 0x0, 0x20008810}, 0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 16.213018863s ago: executing program 3 (id=3022): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0xd}]}}, &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x4010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x20, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x154, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x21}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000084}, 0x4008004) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c0}, 0x5) 15.430781647s ago: executing program 3 (id=3029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xfff2}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtclass={0xb5, 0x28, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xa, 0xe}, {0xfff1, 0xd}, {0xffe0, 0x4}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0xa0, 0x5}}, @tclass_kind_options=@c_red, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x7a, 0xa3}}, @tclass_kind_options=@c_mq={0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x8848}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r6 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1}, 0x40040) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newaddr={0x18, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x1f, 0x56, 0xc8, r11}}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x4040086) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff08000300cf"], 0x44}}, 0x0) 7.151982123s ago: executing program 0 (id=3079): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) setsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0101b8923cc7cfb270be223e1800000000000000300000003000000006000000000000000000000300000000020000000300000003000000040000000000000700000000040000000000006100610000000000000000"], 0x0, 0x4e, 0x0, 0x0, 0x100000}, 0x28) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000001c0)={0x18db8, 0x10000000}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8948, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) (async) pipe(&(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850b44597cd0edc6a1"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 3.346635524s ago: executing program 0 (id=3089): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x80002, 0x88) shutdown(r1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "14c52d"}]}], {0x14}}, 0x7c}}, 0x0) accept4$ax25(r2, &(0x7f00000005c0)={{0x3, @default}, [@rose, @netrom, @rose, @rose, @remote, @remote, @bcast, @default]}, &(0x7f00000000c0)=0x48, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r6}) 2.833799711s ago: executing program 0 (id=3094): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000180)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x504, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xc}}}}, [@NL80211_ATTR_TX_RATES={0x17c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x1}, {0x7, 0x7}, {}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x3}, {0x5}, {0x1}, {0x5, 0x1}, {0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x3}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x24, 0xb, 0x30, 0x12, 0x6c]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x6}, {0x0, 0xe}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x3}, {0x5, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x7}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x3}, {0x6, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x48, 0x6, 0x12, 0x18, 0x48, 0x1b, 0x18, 0x16, 0xb, 0x73, 0x4, 0x9, 0x3, 0xc, 0x18, 0x36, 0x48, 0x1b, 0x56, 0x12, 0x18, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0xc5, 0x9, 0xb, 0x0, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x1, 0x1dee, 0xf63, 0x8001, 0x101, 0x7000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xca21, 0x2c80, 0x3, 0xa879, 0x6, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x4, 0x4, 0x5, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x4}, {0x7, 0x7}, {0x6, 0x5}, {0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x9}, {0x1}, {0x5, 0xa}, {0x0, 0xa}, {0x7, 0x9}, {0x5, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x7, 0x9}, {0x5, 0x5}, {0x5}, {0x3, 0x1}, {0x4, 0x7}, {0x3, 0x3}, {0x5, 0x2}, {0x3, 0x4}, {0x6}, {0x6}, {0x2, 0x3}, {0x4, 0x5}, {0x3, 0x7}, {0x6, 0x9}, {0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x2, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x6}, {0x3}, {0x5, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x3}, {0x2, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x9}, {0x5, 0x4}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x6, 0x9}, {0x7, 0x5}, {0x6, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x168, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7ff, 0x10, 0x401, 0x4, 0x6, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x8}, {0x5, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x6, 0x7}, {0x2, 0x4}, {0x7}, {0x2, 0x3}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x7}, {0x2}, {0x7, 0x9}, {0x7, 0x6}, {0x7, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x4, 0x5}, {0x7, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x4, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0xa}, {0x3}, {0x3, 0x7}, {0x6, 0x7}, {0x7, 0xa}, {0x4, 0x9}, {0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x9}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x6}, {0x5, 0x1}, {0x7, 0x1e}, {0x5, 0x3}, {0x0, 0xa}, {0x3, 0x3}]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8001, 0x9, 0x2, 0x9, 0x80, 0x6, 0x758]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x85a, 0x1, 0x9, 0xffff, 0x9, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x2}, {0x6, 0x2}, {0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x1}, {0x4, 0x9}, {0x5, 0x7}, {0x7}, {0x7, 0xa}, {0x3, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x4, 0x9}, {0x7}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x4}, {0x3}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x8001, 0x6, 0x1, 0x10f, 0x400, 0xa06]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x100, 0x9, 0x7, 0x1000, 0x9, 0x6, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf7b9, 0x8, 0x2, 0xef7, 0xc5, 0x3, 0x700, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x18, 0x12, 0x7a, 0x6c, 0x20, 0x48, 0x32, 0x36, 0x24, 0x9, 0x4, 0x0, 0x4, 0x48, 0x48, 0x6, 0x6, 0x1, 0x36, 0x16, 0x48, 0x12, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x7, 0x5, 0x10, 0x0, 0xc4, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf, 0x18, 0x200, 0x1, 0x0, 0x1, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x5, 0x9, 0x4, 0x3ef, 0x4, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x2, 0x6, 0x2, 0x9, 0x6c, 0x7, 0x1, 0x6e, 0x16, 0x48, 0x47, 0x6c, 0x60, 0x18, 0x48, 0x30, 0x6c, 0xc, 0xc, 0x4, 0xc, 0x1b, 0x3, 0x5, 0x1b, 0x60, 0x6c, 0x1b, 0x60]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x4}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0xa, 0x7, 0x1, 0x8, 0x61, 0x57c8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0xfe92, 0x5, 0x5, 0x200, 0x5, 0xfc01]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x6, 0x6, 0xfff8, 0x1, 0xf, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x9, 0x8d5, 0x6aac, 0x0, 0x6, 0xb79e, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x2, 0xc6f3, 0xa3b, 0x2, 0x0, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1, 0xf37c, 0x2, 0x5, 0x200, 0xffe3, 0x3ed]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6a, 0x7ff0, 0x3, 0x3, 0xfffd, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x8, 0xfff6, 0x8, 0x7, 0x200, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1e, 0x24, 0x4, 0x1, 0x6, 0x5, 0x60, 0x6, 0x2, 0xc, 0x12, 0x5c, 0x6c, 0x4, 0x24, 0xc, 0x36, 0x6c, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x30, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x5, 0x6c, 0x1, 0x6, 0x2, 0x4, 0x5, 0x3f75b5f8fda2d5ba, 0x16, 0x1, 0x24, 0x2, 0x3, 0x1, 0x4, 0x3, 0x30, 0x16, 0x6]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x5}, {0x6, 0x5}, {0x6, 0x7}, {0x1, 0x8}]}]}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x4044080) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000ecd00000000000000000000711083000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x10, 0x6, @remote}, 0x14) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f00000000c0)=0x3, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000281001f0008004500002c0000fffd0011907800000000ac1e0001800036b9884004bb4e2000189000000e0000000900"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000180)) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x504, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xc}}}}, [@NL80211_ATTR_TX_RATES={0x17c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x1}, {0x7, 0x7}, {}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x3}, {0x5}, {0x1}, {0x5, 0x1}, {0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x3}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x24, 0xb, 0x30, 0x12, 0x6c]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x6}, {0x0, 0xe}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x3}, {0x5, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x7}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x3}, {0x6, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x48, 0x6, 0x12, 0x18, 0x48, 0x1b, 0x18, 0x16, 0xb, 0x73, 0x4, 0x9, 0x3, 0xc, 0x18, 0x36, 0x48, 0x1b, 0x56, 0x12, 0x18, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0xc5, 0x9, 0xb, 0x0, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x1, 0x1dee, 0xf63, 0x8001, 0x101, 0x7000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xca21, 0x2c80, 0x3, 0xa879, 0x6, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x4, 0x4, 0x5, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x4}, {0x7, 0x7}, {0x6, 0x5}, {0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x9}, {0x1}, {0x5, 0xa}, {0x0, 0xa}, {0x7, 0x9}, {0x5, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x7, 0x9}, {0x5, 0x5}, {0x5}, {0x3, 0x1}, {0x4, 0x7}, {0x3, 0x3}, {0x5, 0x2}, {0x3, 0x4}, {0x6}, {0x6}, {0x2, 0x3}, {0x4, 0x5}, {0x3, 0x7}, {0x6, 0x9}, {0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x2, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x6}, {0x3}, {0x5, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x3}, {0x2, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x9}, {0x5, 0x4}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x6, 0x9}, {0x7, 0x5}, {0x6, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x168, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7ff, 0x10, 0x401, 0x4, 0x6, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x8}, {0x5, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x6, 0x7}, {0x2, 0x4}, {0x7}, {0x2, 0x3}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x7}, {0x2}, {0x7, 0x9}, {0x7, 0x6}, {0x7, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x4, 0x5}, {0x7, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x4, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0xa}, {0x3}, {0x3, 0x7}, {0x6, 0x7}, {0x7, 0xa}, {0x4, 0x9}, {0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x9}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x6}, {0x5, 0x1}, {0x7, 0x1e}, {0x5, 0x3}, {0x0, 0xa}, {0x3, 0x3}]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8001, 0x9, 0x2, 0x9, 0x80, 0x6, 0x758]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x85a, 0x1, 0x9, 0xffff, 0x9, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x2}, {0x6, 0x2}, {0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x1}, {0x4, 0x9}, {0x5, 0x7}, {0x7}, {0x7, 0xa}, {0x3, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x4, 0x9}, {0x7}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x4}, {0x3}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x8001, 0x6, 0x1, 0x10f, 0x400, 0xa06]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x100, 0x9, 0x7, 0x1000, 0x9, 0x6, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf7b9, 0x8, 0x2, 0xef7, 0xc5, 0x3, 0x700, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x18, 0x12, 0x7a, 0x6c, 0x20, 0x48, 0x32, 0x36, 0x24, 0x9, 0x4, 0x0, 0x4, 0x48, 0x48, 0x6, 0x6, 0x1, 0x36, 0x16, 0x48, 0x12, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x7, 0x5, 0x10, 0x0, 0xc4, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf, 0x18, 0x200, 0x1, 0x0, 0x1, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x5, 0x9, 0x4, 0x3ef, 0x4, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x2, 0x6, 0x2, 0x9, 0x6c, 0x7, 0x1, 0x6e, 0x16, 0x48, 0x47, 0x6c, 0x60, 0x18, 0x48, 0x30, 0x6c, 0xc, 0xc, 0x4, 0xc, 0x1b, 0x3, 0x5, 0x1b, 0x60, 0x6c, 0x1b, 0x60]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x4}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0xa, 0x7, 0x1, 0x8, 0x61, 0x57c8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0xfe92, 0x5, 0x5, 0x200, 0x5, 0xfc01]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x6, 0x6, 0xfff8, 0x1, 0xf, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x9, 0x8d5, 0x6aac, 0x0, 0x6, 0xb79e, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x2, 0xc6f3, 0xa3b, 0x2, 0x0, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1, 0xf37c, 0x2, 0x5, 0x200, 0xffe3, 0x3ed]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6a, 0x7ff0, 0x3, 0x3, 0xfffd, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x8, 0xfff6, 0x8, 0x7, 0x200, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1e, 0x24, 0x4, 0x1, 0x6, 0x5, 0x60, 0x6, 0x2, 0xc, 0x12, 0x5c, 0x6c, 0x4, 0x24, 0xc, 0x36, 0x6c, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x30, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x5, 0x6c, 0x1, 0x6, 0x2, 0x4, 0x5, 0x3f75b5f8fda2d5ba, 0x16, 0x1, 0x24, 0x2, 0x3, 0x1, 0x4, 0x3, 0x30, 0x16, 0x6]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x5}, {0x6, 0x5}, {0x6, 0x7}, {0x1, 0x8}]}]}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x4044080) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000ecd00000000000000000000711083000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) (async) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000) (async) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x10, 0x6, @remote}, 0x14) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f00000000c0)=0x3, 0x4) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @empty, 0x6}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000281001f0008004500002c0000fffd0011907800000000ac1e0001800036b9884004bb4e2000189000000e0000000900"], 0x0) (async) 2.568661446s ago: executing program 1 (id=3096): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0xe, [{0x4, 0x4, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000000c0)=""/71, 0x34, 0x47, 0x1, 0xffffff81, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095", @ANYRESHEX=0x0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @sk_msg, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.387042358s ago: executing program 0 (id=3097): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES8=0x0], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@loopback, @broadcast}, &(0x7f00000000c0)=0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x80) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) accept4(r8, 0x0, 0x0, 0x80800) 2.362337107s ago: executing program 1 (id=3098): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2600c0a8}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xffd4, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.95687476s ago: executing program 4 (id=3100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x24021, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x31, 0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = accept4$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) connect$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @any, 0x19}, 0xe) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000140)="1915000000000000000000000000006e6b31398d95e8f31587a5d6535b70e8b8f09b2aff174ca23b6056ac8da34728a8c8ccda0d61a3d51130fb3ede797eaa74f45029b4de7c7d5a", 0x48}], 0x2) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41040, 0x1005d0}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7ebd5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xcfa2}]}, 0x40}, 0x1, 0xba01, 0x0, 0x800}, 0x20004044) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @loopback}, 0x5, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='veth0\x00', 0x6, 0x7, 0xb0b}) 1.606069173s ago: executing program 1 (id=3102): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x74}, 0x1, 0x0, 0x0, 0x48044}, 0x480c4) getsockname$netlink(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/93, 0x5d}], 0x1, &(0x7f0000000380)=""/16, 0x10}, 0x10000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000811}, 0x4004004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x72}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x2400c081) connect$l2tp(r0, &(0x7f0000000680)={0x2, 0x0, @rand_addr=0x64010102, 0x1}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4c0d1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x1, 0x3, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x8, 0xecc6, 0xe}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd4, r4, 0x400, 0x1, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}, @ETHTOOL_A_COALESCE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xc}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xf}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80000}, 0x4000801) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000bc0)={@un=@file={0x0, './file0\x00'}, {&(0x7f0000000b00)=""/68, 0x44}, &(0x7f0000000b80), 0x30}, 0xa0) r6 = accept4$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @empty}, &(0x7f0000000cc0)=0x10, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000d00)={0x0, @initdev, @remote}, &(0x7f0000000d40)=0xc) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000d80)={r7, @remote, @remote}, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e80)=0x0) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, r9, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, r12, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x1c, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000010c0)={0x0, 0x3, 0x1, [0x8]}, &(0x7f0000001100)=0xa) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001140)={r13, @in={{0x2, 0x4e21, @remote}}, 0x2, 0x88c1, 0x7, 0x4, 0x68, 0x7ff, 0x4}, 0x9c) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x30, r12, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffffb, 0xfffffff2, 0x9, 0xfffffffd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000) 1.444690892s ago: executing program 1 (id=3104): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000000000000000080010000000001c080019"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000000000000000080010000000001c080019"], 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00'}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x3229000, 0x1000, 0xfffffff7}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0xa, 0xc}, {0xc, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c012}, 0x8850) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0xa, 0xc}, {0xc, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c012}, 0x8850) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x129, 0x40000, 0x25dfdbff, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x18, r8, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11}, &(0x7f0000000180), &(0x7f0000000100)=r10}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r11, &(0x7f0000000040), 0x0}, 0x20) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 1.322565788s ago: executing program 4 (id=3105): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c0001000180000000200000e8b20100a1000000c84200000c000100080000000800000034000480f00c000000000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104030000ebac129bd5a2ad8200592341c786ee2ce7d6", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104030000ebac129bd5a2ad8200592341c786ee2ce7d6", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001f01f007f0000007b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008006ca1fd615ad2ea7cc210086f6e25300000000000000000000000000000000040000000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000080), 0x0}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x14, 0x33, 0xb, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x14, 0x33, 0xb, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x69, 0x8, 0x2}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x5, 0x0, 0x1c}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xc8ba, 0x7, 0x9, 'syz1\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xfff3}, {0x3, 0x9}}, [@qdisc_kind_options=@q_hfsc={{}, {0x0, 0x2, @TCA_HFSC_RSC={0x0, 0x1, {0x1a, 0xa4d1}}}}]}, 0xfffffc86}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xfff3}, {0x3, 0x9}}, [@qdisc_kind_options=@q_hfsc={{}, {0x0, 0x2, @TCA_HFSC_RSC={0x0, 0x1, {0x1a, 0xa4d1}}}}]}, 0xfffffc86}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.264402727s ago: executing program 5 (id=3106): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000005, 0x6e073, 0xffffffffffffffff, 0x2000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8) r1 = syz_init_net_socket$llc(0x1a, 0x6, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff6a00084fa53b86dd6000006b00203afffc020000000000000000000000000000fe8000000000000000000000000024b681c319d4323e2e6cecb0787d4600aa01003949640000008700907800000000ff"], 0x0) 1.095770391s ago: executing program 5 (id=3107): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x7, 0xc1, 0x0, 0x0, @str=')\'\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) 935.596349ms ago: executing program 1 (id=3108): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000ff0200"/20], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8912, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffcbdf250900020073797a1b0000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r5], 0x7c}}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001600000400000000080000000a0002000800ca07e5697700"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000001a40)={0x1f, 0x2}, 0x6) write(r10, &(0x7f0000000000)="2e000300", 0x4) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0xa, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x3b, r9, 0xffffffffffffffff}, {0x5, 0x5, 0x4, 0x7, 0xcc, 0x1, 0x4, 0xfffffffffffffffe}, {0x0, 0x8, 0x66296995, 0x9}, 0x3, 0x6e6bb7, 0x1, 0x1, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x34ff, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 925.270428ms ago: executing program 4 (id=3109): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @private1={0xfc, 0x1, '\x00', 0x4}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf2ff, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x100000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41) socket$inet_udplite(0x2, 0x2, 0x88) 878.001633ms ago: executing program 5 (id=3110): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904020800000000000000fe50a10a000600014002020c60ad307e0e357b4dd80a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb79164815ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000180)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r3, @ANYRES32=r2], 0x1c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x2c060000) socket$unix(0x1, 0x1, 0x0) socket(0x2c, 0x3, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000640)={r0, r2, 0x0, 0xe0, &(0x7f0000000480)="3682fb27cd0370251d1584f7e05520f9ff0c8b3487146bb1ccb7c3971a00331f4896391490aafbff0018418fd1a705fe5db10c25a01190611ba372f2c353096a370aec162e25bb4942a6a4a02e2c0e1204d17560c95a62bc89fd702d1d6c6f25f47c1ca67e41ca2480d6c975edde1b7e3c27565f493f1332eff5371a3831387a4ac9ce2a6286c3ff97438cc3110fd5a5d6371336b71548e66eb73e2702de168859d964a613636b23a870d44848157403f2dcc8b1de42cf25b20e4e0d0000000000000056af68837652464e546b975008196760146204b27c6d41e7b4e4b4e4b5d3d86d507d28164df09f0e", 0x2, 0x3, 0x5, 0x3, 0x4, 0x2, 0x8, 'syz0\x00'}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a000000000006000200b300000014001f0000000000000000000000000000000000140020"], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, r9, 0x801, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) (async) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0xfffffffffffffdc6, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}]}}]}, 0xa4}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xfffffffffffffdef}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r14}, @IFLA_IFNAME={0x0, 0x3, 'nicvf0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x7101}) 747.121162ms ago: executing program 4 (id=3111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) unshare(0x2a020400) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) readv(r1, 0x0, 0x0) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x20000001}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) unshare(0x2a020400) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) (async) readv(r1, 0x0, 0x0) (async) epoll_create(0x3ff) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x20000001}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) (async) 681.76824ms ago: executing program 5 (id=3112): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x80, "d48d74fdc771b90d38c61ef7b182e95414e24bfdd1ee4369877d299c7e3677a693fc1899fa25a20047aca98a58795b0fac68a2625172a29c31b77ea6ebd31eee711c1e4b60c2b70e3d1ba8114a1c6fc4fa57fdc9c71a13e9d02ed2e680aca47a9e7e35989fedf0931c96ffea3750b49c6c0ff6d35040cc231f2199c055bddc84"}, &(0x7f0000000280)=0x88) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r1, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001bc0)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async, rerun: 64) syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb08004500008c0000000000019078ac1e0001ac1414aa03059078030000004c00000000000000005e0009ac141400ac1414bb445c00010000000000000000ac1414bb00000000ac141400000000000000000000000000e0000002000000007f00000100000005ac1414aa00000004e000000100000006ffffffff00000008e000000200300000ac1e374a010100000009"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SIOCAX25DELFWD(r4, 0x618f, 0x0) 638.267232ms ago: executing program 0 (id=3113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x18, 0x76, 0x1, 0x0, 0x25dfdbff, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x28}}, 0x2000c050) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0xb0, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:wtmp_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48004}, 0x24002880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200000c090000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r10}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x6c, r12, 0x400, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48005}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 450.182115ms ago: executing program 5 (id=3114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x221, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x60040805) r4 = epoll_create1(0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) sendto$inet6(r3, &(0x7f00000002c0)="fa8f7d81537bc217365810618ec25c3534ddba188fda246fefa0baa7550e76af50f294c95b69dcef2a602ea5d3029875fcd02bf2eeb2aefc3be8fc43d6d2a98c10a0c007958d857adeb4757d55026e302c6bd3aff214718c7b417785c4b2eeaf94f3f19b1cde44f36bad4f9560f12e6cfd328745a404ae4355013705f22f07d730bbef706db9f2b388eb6455a6e6b32ed6c83b5bbc84dffea3826a5fac083db46b3cfaa10f9ed216296269f84b4df9cb0909a4be04e996cb9daa1416dc8788ec1d59573594855be0e8d1b32f9673c727d8e03474819de9685c0182914d61aae7230eb0769487c7", 0xe7, 0x10, 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r3, 0x100}, {r3, 0x200}], 0x2, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)={[0xffffffffffff0001]}, 0x8) openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x8, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x9, 0x5}, {0x8}, {0x0, 0x3}, {0xf}, {0x10}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0xfffffffd}}, @struct={0x9, 0x1, 0x0, 0x4, 0x1, 0xa, [{0xf, 0x0, 0x7ff}]}]}, {0x0, [0x0, 0x61, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000800)=""/211, 0x9c, 0xd3, 0x1, 0xfffffffc, 0x10000}, 0x28) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x16, &(0x7f00000005c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa6}, @exit], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000940)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xa, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[{0x0, 0x4, 0xe, 0x4}, {0x1, 0x3, 0x3}], 0x10, 0xaa7}, 0x94) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xa8881234}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xaa03}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2f}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6cd2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000820}, 0x800) r11 = openat$cgroup_ro(r9, &(0x7f0000000d80)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r11, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xbc, 0x0, 0x600, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa5, 0x2a, [@random={0x2b, 0xf, "3bd408dad1cb7d34b3b76753cd2e8e"}, @tim={0x5, 0x39, {0x2, 0x86, 0x9, "858a9918ea5419fa032e3b9beb9b33516d4fd80e5d75d4436e84efa293c8acd5cb3cedc4fc90ba50b6950e478c8ac0936ac65d28066f"}}, @ibss={0x6, 0x2}, @cf={0x4, 0x6, {0x1, 0x0, 0x1, 0xfff9}}, @rann={0x7e, 0x15, {{0x0, 0x6f}, 0x27, 0x0, @device_b, 0xf737, 0x100, 0x7ff}}, @chsw_timing={0x68, 0x4, {0x101, 0x3}}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x0, 0x0, {0x5, 0xaf, 0x0, 0x67, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x3, 0x99}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x9, 0x4, 0x2c, 0x8001}}, @channel_switch={0x25, 0x3, {0x0, 0x30, 0x3}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001040)={0x1f, 0x1, 0x3}, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001140)={'ip6gre0\x00', &(0x7f00000010c0)={'syztnl0\x00', r7, 0x29, 0x1, 0xf, 0xe28b, 0x64, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8027, 0x8020, 0x6, 0x9}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001600)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001180)={0x43c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3d74b8a74e80de8c}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x33c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '#,][&{:\'.]o^)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/)%%&\xc3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#\'*(+-&&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '(*!\xd5.#-/\xcf%(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}]}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "b63eb791e85a7291e72b3fccbd61dea34f9e79b91ea4e5479854a0ecc7eaef40da9a905b921868420ee2a747759b15ee29b567c2c6e5a28701fdcce60d543d9abda200b4bda06ef804f49f589c3428e81deb5e49fdddacb2f30e9e32b034edcc34a9e8e6efa8ceb94680c376456e2fc6efd47b4b93bd9fab736ab0c7ddbd2d834599c2221612578706242dc9e7f6438aba463212c19b55e79cec19a65adfe2767daab60d79baf4"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_VALUE={0xbe, 0x4, "f750f3c6cb23f47da1f6254b3793acfc1bed9ed25556f6b8426d867c63c491c4ba844743e19a0ab09ab068f2b4a032b1ea57c5c8022243d0b921ce47ad6b7d0ef25f4fdfffb46edc26fbb270e6221ba60ee9531bba2d8e4b6dedbcbc6ad3d293889d2d1072d8da490c245d7ef205dd6f0fbf0492ca9e5ab92dfc29adb5a20e47d2e18b98982f08a9a485225e0ecb498436406274a4015cc523112e4c9a6b579d581eab5a36175d82bab311ba99a06f3996de2e641e6afdcda9a6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000001) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001640)={0x0, 0xe8b}, &(0x7f0000001680)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, &(0x7f00000016c0)={r13, @in6={{0xa, 0x4e21, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x81}}, 0x3, 0x1f, 0x4, 0x3, 0x3}, &(0x7f0000001780)=0x98) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001800)={0x2, &(0x7f00000017c0)=[{0x6, 0x2, 0x8, 0xb4}, {0x0, 0x5b, 0x3, 0xfffff800}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'wlan1\x00'}) 366.663529ms ago: executing program 4 (id=3115): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000004) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYBLOB="154fd66fb549cb35c3e6a9e62c2d78aa7a5a0b7e610e30c5989c6eb07302306cf6db66f0961552eb8bde8f0f4cd84f48329c06f3e6266234d7e6599732aa96e40198eb1c"], 0xa8}, 0x1, 0x0, 0x0, 0x4008850}, 0x24000840) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @default]}, 0x40) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r6 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) r7 = accept(r0, 0x0, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000001c0)=0x6, 0x4) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0x2, 0xb}, &(0x7f0000000500)=0x8) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="05000000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES8=r6, @ANYRES64=r3], 0x48}, 0x300}, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b609010000000000650000000000000018010000646c6c250000000000202020639af8ff00000000cd9100000000000037010000f802bf0d9476bd0921000000b70300000000000015000000060000003f93000000000000b5030000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711082000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xc}, 0x94) (async, rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000000080090857299b5be"], 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="eb551b4ed136e00a9c744de1b8dab75814314bed3119df62b834c8de9be134640f7156f9"], 0x1c}}, 0x40040c4) sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000003092000074afd3f0000000000000080", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000040) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) (async) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0xe) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 320.515745ms ago: executing program 0 (id=3116): socket(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000003ffaa97948e8f39a79cc7b6e9487afa90cd5ed20f31fbc17877fdd5fad7a71c85975727189832342c9b7ea1fc7b95638ae33d7c82ef5dd119617784659e9b051443dd188b10cc45a9d44ba7a9e435ef785298a2ed682f73c1c6fea024af20b0d0e6fdff202e1caf6aad3413009690a4a7a7c7e0b48a5b41ab88aba3644f2732a30dc", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x1, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffffffffffff00000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000001000000feffffff00000000"]}, 0x108) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r6, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) 142.864275ms ago: executing program 5 (id=3117): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1d, 0x80000, 0xc0) (async) r0 = socket(0x1d, 0x80000, 0xc0) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000680)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000680)={0x77359400}, 0x10) getsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, &(0x7f00000008c0)) (async) getsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, &(0x7f00000008c0)) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f99cdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x46881}, 0x24048080) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f99cdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x46881}, 0x24048080) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x4, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x1ff, 0x6, 0x6}, 0x3c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket(0x26, 0x2, 0x2) socket$inet6(0xa, 0x3, 0x7) (async) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r7, 0xfd, 0x22, 0x0, &(0x7f00000002c0)) (async) getsockopt(r7, 0xfd, 0x22, 0x0, &(0x7f00000002c0)) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x801) 140.203553ms ago: executing program 4 (id=3118): r0 = socket(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x39, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', r5}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000100)="06", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18}], 0x30, 0x4855}, 0x24000052) 0s ago: executing program 1 (id=3119): r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/160, 0xa0, 0x22, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f00000000c0)=""/111, &(0x7f0000000140)=0x6f) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x1000) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = accept4(r1, &(0x7f0000000240)=@generic, &(0x7f00000002c0)=0x80, 0xdd571db224bd14d4) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWCHAIN={0x148, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_USERDATA={0xdb, 0xc, "becfbfad2244d68fde45ddaeb3b9c422e55d9ad2b0ba01527111eb5ded9aadaf3451f3e9e2925a9afa11c37130a8e5faf93d1ae13fcfb4f48820ddf1ab2cba8457635ff60a797264075572b0e71361f0e4448b1af7268093e92fb108730b72531be2863b01bfdf9232432be322d7722384a5d93606f70a9b8c02611d56c4565a2830603dc3b610ef2150a5e38fe52991762327532c62268f25357e0ab975d0034178101df54bf3adce402906d81b4f3418c49e33185f6799228e3fcb8661cc05b63ab283f85656f84e2df1782157c9ab593fd9126dec26"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x18c}, 0x1, 0x0, 0x0, 0x4004850}, 0x80) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000580)={0x27, 0x0, 0x1, 0x2, 0x59, 0xb6, "d68d186e6f8e8afc002ac2ed7298be2d5c95c8cb3c03f28675a8c484fec5c6786406ccbebc8763df1455e0e8170b8107d3b8877c8fb8c8c8f68163eb52e8ce", 0x5}, 0x60) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000600)=0x5, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x1b, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x8}, @alu={0x7, 0x0, 0xb, 0x7, 0x6, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_idx={0x18, 0x2}]}, &(0x7f0000000780)='syzkaller\x00', 0x5, 0xd7, &(0x7f00000007c0)=""/215, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x1, 0x100, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000980)=[{0x3, 0x5, 0xd, 0x1}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x5, 0xd, 0x2}, {0x1, 0x5, 0x2, 0x3}]}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000640)='irq_noise\x00', r4}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x1) socket$unix(0x1, 0x3, 0x0) r6 = socket$isdn(0x22, 0x3, 0x26) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000bc0)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000c80)={0xd549, 0x10000, 0x101, 0x5}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x20004010}, 0x4011) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000e00)=0x5, 0x4) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfe, {0x28, 0x1, 0x2, 0x0, 0xf, 0xa, 0x5, 0x80000000, 0x0, 0x6, 0x8}}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000f40)=0x9, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=0x0) bind$nfc_llcp(r3, &(0x7f0000000fc0)={0x27, r8, 0x0, 0x4, 0x80, 0x2, "9e86102413f770960fac3419f134c753397b833cb51450466a7be5bfccc8086a69eb72b52b420d2689cf3a3b418efddf0f5912d7d2d8e332eb0f9ac650b81d", 0x2c}, 0x60) writev(r2, &(0x7f0000002480)=[{&(0x7f0000001040)="9c6c07f028f6dba11500e197c623e8ccd69b089a4fdf78dfac917d4b06a898d7235ecae1a916eda87eb06a3302a2bfbafa679d5c8101d01638d45b155450a34812a6b3fa288b928eaacee6dfc51c4e47b5b97361e5d7af09c78f80162260f5047fa3600c8fe9344c11d424ea6389b1df95ef80af78d60855a62376", 0x7b}, {&(0x7f00000010c0)="985075517864b813442563eaf3757a544f936c5ae276e0e13877708ed9c308a92fa20af0c2025dc6cecc44dd32d1ec292fdb857a7baa2611e5415dbd23286dc0b9dd501f754a637197acdfafdd2a48f106eb3cacd191237f71d7c9def8ea483d14b021a704dcb5ccbe4e47653599db00f66dcb4494cd558431ff0f7e26363f44dc8032eb75375bb59660ace812439a0ab1ee6b80118883e26c3e6c9f452d5d8768fb0e806dc9a04431", 0xa9}, {&(0x7f0000001180)="717e9bfd51a657b7135256b1f3c4f0d12636846fd46c37f5a1c5a4e68cd46e445ce8f2355ebb829a6ee362362bff2e9af945b54b4d7a06b5b935a48e2cfdbc175fb489cc720786684e55b45df864ae2d25895f4ca995d8d5061e11342c24f93fefcd1a5aa58ba6ce3198f4e19b69244b5abe69188cfaf926ac2ddc35cccd6b347bff425041d1d9bc3ddd97d9b3adff57d0384a662e85fca0077210085fabc9911f8659fb224f5ee956ec45b0c7acb2999289b63f33aa0ae2bb427735fba7e8b40582c11d8f6bd9c73d2d", 0xca}, {&(0x7f0000001280)="56a74a8fb10182749cfeb054382472d1e73c4f802f7eae337a074210882ecc4ca50ce0010377625eea69efbdc79dd329d7ba515f12f665f1d2e78136980bad", 0x3f}, {&(0x7f00000012c0)="4306b20c99dc60006a8ee52b3ae3dfd38a9877efa20d1ea6b33bf397aa6c74eacd33281b34b0fa28898a97d93ed741001032bf689e1823160f4f08141d6dd98e3963665c21a496665049f76ba10577141960272c1f06a3fc76318820e24a65f95555441dbda2b7325ac95923866f45380a2b20dab86041b36c8891048c3e945dec4b9d603855c1743ac8cdc6cc26c581244234c1fb46c3757d", 0x99}, {&(0x7f0000001380)="195d06cf3fdebb30f14b98a1d74d0fff89d52b97a50f0cdd06d2a005ec589b23b0ad6b35c2780d2bf0c09a5c9bca9bf402698334d91b7cdb305df9177a5b7b4a09b32fa55f78edf0", 0x48}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="e3530f98ecbf0c12ef28ef5e285e99ea02ea7e6cd7cb0026f11fb3894afee999cab4f29c9dd473ea107279769628ee23ebc2378327f7bf1278deaa9c0bcbdf41135c9a0441e7ad22b01d83c9a787b897a5f04251563bb65924edcfd618c557f9a632bae0f3d0a0db610b6dd695aa1b822d9494c8f50e5a2c7b61b620aa0f6f", 0x7f}], 0x8) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000002500)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000002540)) kernel console output (not intermixed with test programs): attributes in process `syz.0.1340'. [ 375.911511][T11346] lo: Caught tx_queue_len zero misconfig [ 376.084552][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1346'. [ 376.280875][T11366] lo speed is unknown, defaulting to 1000 [ 376.482206][T11378] netlink: 'syz.0.1352': attribute type 10 has an invalid length. [ 376.504510][T11378] veth0_macvtap: left promiscuous mode [ 376.516523][T11378] team0: Device veth0_macvtap failed to register rx_handler [ 376.591564][T11381] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1354'. [ 376.601635][T11381] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1354'. [ 376.636162][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 376.744815][T11387] netlink: 'syz.3.1355': attribute type 58 has an invalid length. [ 376.781139][T11387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1355'. [ 377.345397][T11406] netlink: 'syz.0.1360': attribute type 1 has an invalid length. [ 378.360759][T11443] netlink: 'syz.4.1368': attribute type 13 has an invalid length. [ 378.385862][T11443] netlink: 'syz.4.1368': attribute type 17 has an invalid length. [ 378.530684][T11443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.594516][T11449] ip6tnl1: entered promiscuous mode [ 378.640692][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 378.814685][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1371'. [ 378.842795][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 378.865847][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 378.893833][T11467] netlink: 'syz.3.1374': attribute type 15 has an invalid length. [ 378.903871][T11467] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1374'. [ 379.137953][T11481] xt_TCPMSS: Only works on TCP SYN packets [ 379.631589][T11507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.711743][T11507] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 379.801657][T11521] netlink: 'syz.1.1390': attribute type 21 has an invalid length. [ 379.835593][T11521] netlink: 'syz.1.1390': attribute type 5 has an invalid length. [ 379.856450][T11521] netlink: 'syz.1.1390': attribute type 6 has an invalid length. [ 380.167823][T11541] netlink: 'syz.5.1396': attribute type 3 has an invalid length. [ 380.673310][T11563] tap0: tun_chr_ioctl cmd 2147767507 [ 380.785220][T11562] lo speed is unknown, defaulting to 1000 [ 380.820214][T11571] No such timeout policy "syz0" [ 380.851018][T11572] __nla_validate_parse: 5 callbacks suppressed [ 380.851039][T11572] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1404'. [ 380.890884][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 380.995176][T11578] netlink: 181328 bytes leftover after parsing attributes in process `syz.5.1405'. [ 381.356864][T11589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.670421][T11610] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 381.815056][T11615] syz_tun: entered promiscuous mode [ 381.826388][T11615] vlan2: entered promiscuous mode [ 381.895550][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1419'. [ 381.904922][T11619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1419'. [ 381.929684][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1419'. [ 381.938954][T11619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1419'. [ 382.221232][T11638] xt_TCPMSS: Only works on TCP SYN packets [ 382.466804][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1426'. [ 382.554722][T11651] bond5: option mode: invalid value (254) [ 382.575032][T11651] bond5 (unregistering): Released all slaves [ 382.678747][T11663] validate_nla: 3 callbacks suppressed [ 382.680664][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1427'. [ 382.688373][T11663] netlink: 'syz.3.1432': attribute type 2 has an invalid length. [ 382.858858][T11671] xt_l2tp: invalid flags combination: 8 [ 382.871828][T11672] xt_l2tp: invalid flags combination: 8 [ 382.910965][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1432'. [ 383.424675][T11689] syzkaller0: entered promiscuous mode [ 383.443422][T11689] syzkaller0: entered allmulticast mode [ 383.780959][T11703] tipc: Enabling of bearer rejected, failed to enable media [ 383.855257][T11707] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 384.134401][T11721] netlink: 'syz.1.1450': attribute type 10 has an invalid length. [ 384.153959][T11694] lec:lec_atm_close: lec0: Shut down! [ 384.463818][T11727] macvlan0: entered promiscuous mode [ 384.469313][T11727] bond0: entered promiscuous mode [ 384.477304][T11727] bond_slave_0: entered promiscuous mode [ 384.484482][T11727] bond_slave_1: entered promiscuous mode [ 384.513084][T11727] macvlan0: entered allmulticast mode [ 384.518562][T11727] bond0: entered allmulticast mode [ 384.529746][T11727] bond_slave_0: entered allmulticast mode [ 384.535696][T11727] bond_slave_1: entered allmulticast mode [ 384.543831][T11727] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 384.559857][T11743] sctp: [Deprecated]: syz.3.1456 (pid 11743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.559857][T11743] Use struct sctp_sack_info instead [ 384.578508][T11736] lo speed is unknown, defaulting to 1000 [ 385.122952][T11763] syzkaller0: entered promiscuous mode [ 385.128935][T11763] syzkaller0: entered allmulticast mode [ 385.894654][T11792] netlink: 'syz.5.1471': attribute type 1 has an invalid length. [ 385.943634][T11792] bond2: entered promiscuous mode [ 385.949738][T11792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.297646][T11821] vxcan3: entered promiscuous mode [ 386.647057][T11833] tipc: Enabling of bearer rejected, failed to enable media [ 386.657739][T11833] netlink: 'syz.3.1482': attribute type 12 has an invalid length. [ 386.675527][T11833] netlink: 'syz.3.1482': attribute type 29 has an invalid length. [ 386.684048][T11833] __nla_validate_parse: 10 callbacks suppressed [ 386.684063][T11833] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1482'. [ 386.724774][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1483'. [ 386.753089][T11838] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 387.293940][T11869] tipc: Enabled bearer , priority 0 [ 387.303831][T11869] syzkaller0: entered promiscuous mode [ 387.319522][T11869] syzkaller0: entered allmulticast mode [ 387.393908][T11869] tipc: Resetting bearer [ 387.405420][T11868] tipc: Resetting bearer [ 387.446946][T11868] tipc: Disabling bearer [ 387.472066][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1495'. [ 387.481743][T11881] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1496'. [ 387.556316][T11885] IPVS: set_ctl: invalid protocol: 178 172.20.20.187:20000 [ 387.622865][T11878] lo speed is unknown, defaulting to 1000 [ 388.024659][T11902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1503'. [ 388.050137][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1503'. [ 388.068202][T11902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1503'. [ 388.083754][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1503'. [ 388.807301][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1515'. [ 388.840612][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1515'. [ 388.873177][T11944] bond0: entered promiscuous mode [ 388.878278][T11944] bond_slave_0: entered promiscuous mode [ 388.904963][T11944] bond_slave_1: entered promiscuous mode [ 388.913919][T11944] bond0: left promiscuous mode [ 388.920284][T11944] bond_slave_0: left promiscuous mode [ 388.926081][T11944] bond_slave_1: left promiscuous mode [ 388.976351][T11946] geneve5: entered promiscuous mode [ 389.159432][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 389.167931][ C1] lec:lec_tx_timeout: lec0 [ 389.301430][T11965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.501665][T11976] openvswitch: netlink: IPv6 tunnel dst address is zero [ 389.533950][T11976] rdma_rxe: rxe_newlink: failed to add syz_tun [ 389.562077][T11976] openvswitch: netlink: IPv6 tunnel dst address is zero [ 389.714655][ T9062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.736995][ T9062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.389267][T12011] lo speed is unknown, defaulting to 1000 [ 390.458233][T12009] netlink: 'syz.3.1531': attribute type 13 has an invalid length. [ 390.486685][T12009] netlink: 'syz.3.1531': attribute type 17 has an invalid length. [ 390.628787][T12009] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 390.927699][T12021] lo speed is unknown, defaulting to 1000 [ 392.044299][T12049] lo speed is unknown, defaulting to 1000 [ 392.338741][T12069] lo speed is unknown, defaulting to 1000 [ 392.358051][T12075] __nla_validate_parse: 2 callbacks suppressed [ 392.358071][T12075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1546'. [ 392.521230][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 392.638499][T12076] bond5 (unregistering): Released all slaves [ 392.700229][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'. [ 392.711159][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'. [ 393.359023][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 393.394619][T12100] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1552'. [ 393.651175][T12109] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 394.118685][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'. [ 394.508781][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 394.542164][T12147] tipc: Enabled bearer , priority 0 [ 394.560778][T12147] syzkaller0: entered promiscuous mode [ 394.566395][T12147] syzkaller0: entered allmulticast mode [ 394.593524][T12147] tipc: Resetting bearer [ 394.649924][T12146] tipc: Resetting bearer [ 394.740509][T12146] tipc: Disabling bearer [ 394.882627][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1563'. [ 395.074101][T12160] bond5: Unable to set down delay as MII monitoring is disabled [ 395.138360][T12160] bond5 (unregistering): Released all slaves [ 395.649022][T12181] lo speed is unknown, defaulting to 1000 [ 395.776100][T12190] tunl0: Caught tx_queue_len zero misconfig [ 395.842347][T12192] pim6reg: entered allmulticast mode [ 396.177554][T12195] pim6reg: left allmulticast mode [ 396.210872][ T9068] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.220650][ T9068] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.358568][ T9068] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.379795][ T9068] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.489919][ T9068] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.499235][ T9068] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.531581][ T9068] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.549997][ T9068] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.581872][T12210] lo speed is unknown, defaulting to 1000 [ 396.663220][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1580'. [ 396.671868][T12230] SET target dimension over the limit! [ 396.675599][T12231] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 396.686488][T12225] netlink: 'syz.5.1580': attribute type 1 has an invalid length. [ 396.828816][T12241] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 396.857253][T12231] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.906741][T12228] lo speed is unknown, defaulting to 1000 [ 397.180112][T12250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.594129][T12261] syzkaller0: entered promiscuous mode [ 397.605555][T12261] syzkaller0: entered allmulticast mode [ 397.830860][T12268] netlink: 'syz.1.1592': attribute type 21 has an invalid length. [ 397.847346][T12268] __nla_validate_parse: 2 callbacks suppressed [ 397.847369][T12268] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1592'. [ 397.866475][T12268] netlink: 'syz.1.1592': attribute type 5 has an invalid length. [ 397.882577][T12268] netlink: 'syz.1.1592': attribute type 6 has an invalid length. [ 397.891784][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 397.906617][T12268] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1592'. [ 398.234533][T12289] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1598'. [ 398.261602][T12289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.343063][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 398.367762][T12289] netlink: 'syz.3.1598': attribute type 15 has an invalid length. [ 398.377960][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1599'. [ 398.387316][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 398.396714][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1599'. [ 398.422566][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1601'. [ 398.443925][T12297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1601'. [ 398.599966][T12292] lo speed is unknown, defaulting to 1000 [ 398.654215][T12302] lo speed is unknown, defaulting to 1000 [ 398.812180][T12310] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 399.130165][T12324] netlink: 'syz.4.1605': attribute type 13 has an invalid length. [ 399.705018][T12360] xt_l2tp: invalid flags combination: 8 [ 399.900244][T12368] veth0: entered promiscuous mode [ 399.913452][T12362] lo speed is unknown, defaulting to 1000 [ 399.948246][T12361] lo speed is unknown, defaulting to 1000 [ 400.095485][T12367] veth0: left promiscuous mode [ 400.626290][T12408] lo speed is unknown, defaulting to 1000 [ 440.265993][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 445.279475][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.287587][ C1] lec:lec_tx_timeout: lec0 [ 460.749772][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 467.251438][T12458] netlink: 'syz.5.1636': attribute type 39 has an invalid length. [ 468.006493][T12492] netlink: 'syz.5.1644': attribute type 21 has an invalid length. [ 468.033494][T12492] __nla_validate_parse: 6 callbacks suppressed [ 468.033517][T12492] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1644'. [ 468.053230][T12492] netlink: 'syz.5.1644': attribute type 5 has an invalid length. [ 468.063273][T12492] netlink: 'syz.5.1644': attribute type 6 has an invalid length. [ 468.080222][T12492] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1644'. [ 468.239279][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1647'. [ 468.296860][T12506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.413384][T12507] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 468.447772][T12507] bond4 (unregistering): Released all slaves [ 468.664703][T12521] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1653'. [ 468.713362][T12521] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1653'. [ 468.755085][T12521] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1653'. [ 468.792155][T12524] lo speed is unknown, defaulting to 1000 [ 468.826120][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 469.366996][T12554] veth1_to_bridge: entered allmulticast mode [ 469.543926][T12561] openvswitch: netlink: Flow key attr not present in new flow. [ 469.834644][T12567] netlink: 'syz.0.1662': attribute type 4 has an invalid length. [ 469.853282][T12546] delete_channel: no stack [ 469.888688][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1664'. [ 469.922787][T12571] veth1_macvtap: left promiscuous mode [ 470.255363][T12585] bond4 (unregistering): Released all slaves [ 470.843962][T12611] syzkaller0: entered promiscuous mode [ 470.894152][T12611] syzkaller0: entered allmulticast mode [ 470.921467][T12610] tipc: Enabled bearer , priority 0 [ 470.990296][T12610] tipc: Resetting bearer [ 471.085406][T12610] tipc: Disabling bearer [ 471.278529][T12627] lo speed is unknown, defaulting to 1000 [ 471.313222][T12635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1680'. [ 471.314857][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'. [ 471.373015][T12631] ip6tnl0: Caught tx_queue_len zero misconfig [ 472.540729][T12676] Can't find ip_set type hash:ip$mec [ 472.549794][T12677] Can't find ip_set type hash:ip$mec [ 472.831825][T12697] lo speed is unknown, defaulting to 1000 [ 473.197929][T12724] siw: device registration error -23 [ 473.260770][T12710] lo speed is unknown, defaulting to 1000 [ 473.396145][T12722] 8021q: VLANs not supported on vcan0 [ 473.585794][T12742] __nla_validate_parse: 4 callbacks suppressed [ 473.585816][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1707'. [ 473.824950][T12752] lo speed is unknown, defaulting to 1000 [ 474.275002][T12770] netlink: 'syz.3.1716': attribute type 4 has an invalid length. [ 474.284979][T12771] netlink: 'syz.3.1716': attribute type 4 has an invalid length. [ 474.360548][T12775] block nbd5: not configured, cannot reconfigure [ 474.366049][T12767] batadv_slave_0: Caught tx_queue_len zero misconfig [ 474.451593][T12783] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1718'. [ 474.461690][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 474.501591][T12783] 0{X: renamed from gretap0 (while UP) [ 474.560010][T12783] 0{X: entered allmulticast mode [ 474.597658][T12783] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 474.851281][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 475.147468][T12814] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1724'. [ 475.597615][T12838] netlink: 'syz.5.1729': attribute type 2 has an invalid length. [ 475.625753][T12838] netlink: 'syz.5.1729': attribute type 1 has an invalid length. [ 475.655290][T12838] netlink: 'syz.5.1729': attribute type 2 has an invalid length. [ 476.123721][T12862] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 476.124323][T12877] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1735'. [ 476.186025][T12862] bond6 (unregistering): Released all slaves [ 476.364179][T12882] tipc: Enabling of bearer rejected, failed to enable media [ 476.400286][T12881] tipc: Enabling of bearer rejected, failed to enable media [ 476.571991][T12894] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 476.734181][T12902] netlink: 'syz.1.1741': attribute type 2 has an invalid length. [ 476.774833][T12902] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 476.840676][T12909] veth1_vlan: entered allmulticast mode [ 476.854790][T12909] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 476.951396][T12907] syzkaller0: entered promiscuous mode [ 476.973293][T12907] syzkaller0: entered allmulticast mode [ 477.591438][T12952] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1752'. [ 477.672937][T12963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.751882][T12966] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1750'. [ 478.019227][T12975] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1756'. [ 478.569203][T12997] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1763'. [ 478.665400][T13003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 478.726395][T13007] netlink: 476 bytes leftover after parsing attributes in process `syz.3.1765'. [ 478.777687][T13007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1765'. [ 478.803296][T13003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 478.867297][T13018] bridge0: port 3(macvtap1) entered blocking state [ 478.890863][T13018] bridge0: port 3(macvtap1) entered disabled state [ 478.897657][T13018] macvtap1: entered allmulticast mode [ 478.917364][T13018] bridge0: entered allmulticast mode [ 478.936677][T13018] macvtap1: left allmulticast mode [ 478.950175][T13018] bridge0: left allmulticast mode [ 478.990743][T13019] netlink: 'syz.5.1762': attribute type 1 has an invalid length. [ 479.017646][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 479.043864][T13030] Bluetooth: MGMT ver 1.23 [ 479.099799][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 479.139689][T13017] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 479.150691][T13017] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 479.163467][T13017] bond4: (slave xfrm1): making interface the new active one [ 479.171749][T13017] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 479.189814][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 479.193313][T13039] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1772'. [ 479.231568][T13025] syzkaller0: entered promiscuous mode [ 479.237081][T13025] syzkaller0: entered allmulticast mode [ 479.247671][T13037] tipc: Enabling of bearer rejected, failed to enable media [ 479.275981][T13025] x_tables: duplicate underflow at hook 1 [ 479.865757][T13058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1776'. [ 479.879187][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'. [ 481.077153][T13058] bridge_slave_1: left allmulticast mode [ 481.084947][T13058] bridge_slave_1: left promiscuous mode [ 481.090904][T13058] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.105307][T13058] bridge_slave_0: left allmulticast mode [ 481.122819][T13058] bridge_slave_0: left promiscuous mode [ 481.128695][T13058] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.484805][T13087] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 481.494660][T13086] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 481.520796][T13092] tipc: Enabled bearer , priority 0 [ 481.528578][T13092] syzkaller0: entered promiscuous mode [ 481.551054][T13092] syzkaller0: entered allmulticast mode [ 481.660314][T13092] tipc: Resetting bearer [ 481.700737][T13088] tipc: Resetting bearer [ 481.754086][T13088] tipc: Disabling bearer [ 482.062228][T13130] netlink: 'syz.5.1795': attribute type 8 has an invalid length. [ 482.077927][T13121] lo speed is unknown, defaulting to 1000 [ 482.277889][T13133] lo speed is unknown, defaulting to 1000 [ 482.429938][T13146] netlink: 'syz.0.1801': attribute type 10 has an invalid length. [ 482.522921][T13151] lo speed is unknown, defaulting to 1000 [ 483.240149][T13188] gretap0: entered promiscuous mode [ 483.462975][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 484.005327][T13220] IPv6: Can't replace route, no match found [ 484.067234][T13230] __nla_validate_parse: 7 callbacks suppressed [ 484.067256][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1818'. [ 484.134305][T13232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1818'. [ 484.135320][T13230] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1818'. [ 484.260348][T13231] lo speed is unknown, defaulting to 1000 [ 484.364756][T13241] lo speed is unknown, defaulting to 1000 [ 484.418437][T13248] tipc: Enabled bearer , priority 10 [ 484.449232][T13248] bridge1: entered allmulticast mode [ 484.456534][T13249] wg1 speed is unknown, defaulting to 1000 [ 484.464520][T13249] wg1 speed is unknown, defaulting to 1000 [ 484.475446][T13249] wg1 speed is unknown, defaulting to 1000 [ 484.513765][T13249] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 484.634633][T13249] wg1 speed is unknown, defaulting to 1000 [ 484.658080][T13249] wg1 speed is unknown, defaulting to 1000 [ 484.752444][T13249] wg1 speed is unknown, defaulting to 1000 [ 484.774858][T13253] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1826'. [ 484.784909][T13249] wg1 speed is unknown, defaulting to 1000 [ 484.793416][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1826'. [ 484.806835][T13249] wg1 speed is unknown, defaulting to 1000 [ 484.819866][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1826'. [ 484.831563][T13249] wg1 speed is unknown, defaulting to 1000 [ 484.838884][T13249] wg1 speed is unknown, defaulting to 1000 [ 485.540556][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 486.872057][T13295] pimreg: entered allmulticast mode [ 487.173024][T13302] lo speed is unknown, defaulting to 1000 [ 487.183061][T13302] wg1 speed is unknown, defaulting to 1000 [ 487.206625][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1841'. [ 487.209177][T13276] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1832'. [ 487.283927][T13315] wireguard1: entered promiscuous mode [ 487.298366][T13315] wireguard1: entered allmulticast mode [ 487.314239][T13315] team0: Device wireguard1 is of different type [ 487.430059][T13320] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 487.443865][T13320] bond6 (unregistering): Released all slaves [ 487.446277][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1839'. [ 487.873853][T13339] lo speed is unknown, defaulting to 1000 [ 487.882744][T13344] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1848'. [ 488.097818][T13339] wg1 speed is unknown, defaulting to 1000 [ 488.124536][T13345] 0: reclassify loop, rule prio 0, protocol 800 [ 489.001522][T13369] syz_tun: entered allmulticast mode [ 489.468184][T13363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.488029][T13363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.515395][T13363] bond0 (unregistering): Released all slaves [ 489.548855][T13362] syz_tun: left allmulticast mode [ 489.557250][T13392] __nla_validate_parse: 2 callbacks suppressed [ 489.557270][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'. [ 489.644289][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 489.897447][T13403] netlink: 'syz.3.1865': attribute type 1 has an invalid length. [ 490.095060][T13403] bond4: entered promiscuous mode [ 490.125577][T13403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.149803][T13409] lo: Caught tx_queue_len zero misconfig [ 491.004516][T13435] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1876'. [ 491.034444][T13433] lo speed is unknown, defaulting to 1000 [ 491.045172][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 491.055025][T13435] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1876'. [ 491.089604][T13433] wg1 speed is unknown, defaulting to 1000 [ 491.202500][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1874'. [ 491.237441][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.249216][T13437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.260790][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.280049][T13445] netlink: 'syz.4.1878': attribute type 22 has an invalid length. [ 491.280298][T13437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.288545][T13445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1878'. [ 491.311539][T13455] openvswitch: netlink: Message has -2 unknown bytes. [ 491.318384][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.344383][T13452] netlink: 'syz.4.1878': attribute type 22 has an invalid length. [ 491.361094][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1878'. [ 491.448384][T13445] syzkaller0: entered promiscuous mode [ 491.465424][T13445] syzkaller0: entered allmulticast mode [ 491.610637][T13464] lo speed is unknown, defaulting to 1000 [ 491.617250][T13464] wg1 speed is unknown, defaulting to 1000 [ 491.956971][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 491.966377][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1883'. [ 491.975682][T13481] netlink: 'syz.4.1883': attribute type 18 has an invalid length. [ 492.150614][T13480] lo speed is unknown, defaulting to 1000 [ 492.157695][T13480] wg1 speed is unknown, defaulting to 1000 [ 493.311190][T13535] bond6 (unregistering): Released all slaves [ 493.411953][T13540] netlink: 'syz.5.1901': attribute type 9 has an invalid length. [ 493.887652][T13555] syzkaller0: entered promiscuous mode [ 493.917923][T13555] syzkaller0: entered allmulticast mode [ 493.988300][T13555] macsec1: entered promiscuous mode [ 494.016445][T13555] macsec1: entered allmulticast mode [ 494.255799][T13565] lo speed is unknown, defaulting to 1000 [ 494.293604][T13565] wg1 speed is unknown, defaulting to 1000 [ 494.377865][T13577] netlink: 'syz.3.1910': attribute type 1 has an invalid length. [ 494.435497][ T52] Bluetooth: hci3: link tx timeout [ 494.449780][ T52] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 494.467020][T13576] lo speed is unknown, defaulting to 1000 [ 494.477658][T13576] wg1 speed is unknown, defaulting to 1000 [ 494.796839][T13594] __nla_validate_parse: 7 callbacks suppressed [ 494.796859][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1914'. [ 494.833988][T13594] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 495.289533][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1920'. [ 495.319635][T13618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1920'. [ 495.339163][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1920'. [ 495.378285][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1920'. [ 495.505186][T13624] lo speed is unknown, defaulting to 1000 [ 495.560887][T13624] wg1 speed is unknown, defaulting to 1000 [ 495.585734][T13626] lo speed is unknown, defaulting to 1000 [ 495.669515][T13626] wg1 speed is unknown, defaulting to 1000 [ 495.686754][T13630] siw: device registration error -23 [ 496.499777][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 497.218841][T13686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1938'. [ 497.234469][T13686] openvswitch: netlink: Flow key attr not present in new flow. [ 497.286438][T13689] veth0: Caught tx_queue_len zero misconfig [ 497.616157][T13716] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1946'. [ 497.741307][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 497.928412][T13726] x_tables: duplicate underflow at hook 1 [ 497.958951][T13726] No such timeout policy "syz1" [ 498.000383][T13726] netlink: 'syz.4.1947': attribute type 1 has an invalid length. [ 498.008174][T13726] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1947'. [ 498.086657][T13735] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1950'. [ 498.124082][T13730] vxcan2: entered allmulticast mode [ 498.222426][T13701] lo speed is unknown, defaulting to 1000 [ 498.242454][T13701] wg1 speed is unknown, defaulting to 1000 [ 498.375635][T13745] sctp: [Deprecated]: syz.3.1952 (pid 13745) Use of int in max_burst socket option. [ 498.375635][T13745] Use struct sctp_assoc_value instead [ 498.576704][T13750] nbd: device at index 64 is going down [ 499.015849][T13769] Bluetooth: MGMT ver 1.23 [ 499.385007][T13791] tap0: tun_chr_ioctl cmd 1074025681 [ 499.435519][T13793] tipc: Enabled bearer , priority 0 [ 499.446384][T13793] tipc: Resetting bearer [ 499.553383][T13789] tipc: Disabling bearer [ 499.727724][T13812] macvlan2: entered promiscuous mode [ 499.740639][T13812] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 499.750768][T13812] macvlan2: entered allmulticast mode [ 499.760664][T13812] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 499.772041][T13811] lo speed is unknown, defaulting to 1000 [ 499.782787][T13811] wg1 speed is unknown, defaulting to 1000 [ 500.154827][T13829] syzkaller0: entered promiscuous mode [ 500.179578][T13829] syzkaller0: entered allmulticast mode [ 500.330695][T13834] lo speed is unknown, defaulting to 1000 [ 500.339964][T13834] wg1 speed is unknown, defaulting to 1000 [ 500.509033][T13846] netlink: 'syz.4.1978': attribute type 27 has an invalid length. [ 500.909775][T13869] netlink: 'syz.4.1985': attribute type 8 has an invalid length. [ 500.934034][T13870] __nla_validate_parse: 5 callbacks suppressed [ 500.934057][T13870] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1986'. [ 501.716562][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 502.518187][T13880] sock: sock_timestamping_bind_phc: sock not bind to device [ 502.583994][T13887] netlink: get zone limit has 8 unknown bytes [ 502.656119][T13887] xfrm0: Caught tx_queue_len zero misconfig [ 502.674917][T13893] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 502.687610][T13893] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 502.696303][T13893] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.1993'. [ 502.874418][T13891] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.882164][T13891] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.277521][ T9076] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.300017][ T9076] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.385931][ T9076] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.401905][ T9076] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.503007][T13922] netlink: 'syz.0.1998': attribute type 2 has an invalid length. [ 503.525808][T13922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 503.547164][T13920] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1997'. [ 503.800814][T13928] lo speed is unknown, defaulting to 1000 [ 503.808819][T13928] wg1 speed is unknown, defaulting to 1000 [ 504.170016][T13959] xt_hashlimit: size too large, truncated to 1048576 [ 504.176756][T13959] xt_hashlimit: max too large, truncated to 1048576 [ 504.331872][T13973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2012'. [ 504.653479][T13984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.681282][T13984] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 504.841441][T13996] netlink: 536 bytes leftover after parsing attributes in process `syz.3.2019'. [ 505.641069][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2025'. [ 505.888569][T14034] lo speed is unknown, defaulting to 1000 [ 505.930564][T14034] wg1 speed is unknown, defaulting to 1000 [ 506.274281][T14049] netlink: 'syz.5.2034': attribute type 1 has an invalid length. [ 506.355732][T14049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.637911][T14062] vxcan3: entered allmulticast mode [ 507.059363][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 507.067776][ C1] lec:lec_tx_timeout: lec0 [ 507.128175][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 507.430345][T14062] Cannot find del_set index 4 as target [ 507.680325][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 507.720882][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'. [ 507.782799][T14097] netlink: 'syz.0.2043': attribute type 18 has an invalid length. [ 508.279091][T14111] netlink: 'syz.4.2046': attribute type 5 has an invalid length. [ 508.303146][T14111] syzkaller1: entered promiscuous mode [ 508.310224][T14111] syzkaller1: entered allmulticast mode [ 508.324626][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 508.648793][T14127] tipc: Enabled bearer , priority 10 [ 508.794416][T14131] dummy0: entered promiscuous mode [ 508.838247][T14131] bond0: entered promiscuous mode [ 508.892628][T14131] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 508.984861][T14131] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 509.019724][T14131] hsr1: entered allmulticast mode [ 509.035842][T14131] dummy0: entered allmulticast mode [ 509.051929][T14131] bond0: entered allmulticast mode [ 509.068424][T14137] netlink: 'syz.4.2053': attribute type 3 has an invalid length. [ 509.127722][T14147] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2056'. [ 509.238284][T14150] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 509.627432][T14180] lo speed is unknown, defaulting to 1000 [ 509.639533][T14180] wg1 speed is unknown, defaulting to 1000 [ 509.778818][T14189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2067'. [ 509.836162][T14189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2067'. [ 510.016301][T14203] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 510.482970][T14216] tipc: Enabled bearer , priority 0 [ 510.585397][T14215] tipc: Disabling bearer [ 510.608835][T14236] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2080'. [ 510.636726][T14236] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2080'. [ 510.665031][T14240] netlink: 'syz.5.2081': attribute type 2 has an invalid length. [ 510.697322][T14236] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2080'. [ 510.699657][T14240] netlink: 'syz.5.2081': attribute type 8 has an invalid length. [ 510.925274][T14246] lo: left allmulticast mode [ 510.935309][T14246] pim6reg: left allmulticast mode [ 511.309850][T14271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.635082][T14289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.803888][T14294] lo speed is unknown, defaulting to 1000 [ 511.813885][T14294] wg1 speed is unknown, defaulting to 1000 [ 512.528175][T14329] __nla_validate_parse: 4 callbacks suppressed [ 512.528196][T14329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2105'. [ 512.738756][T14316] lo speed is unknown, defaulting to 1000 [ 512.772751][T14316] wg1 speed is unknown, defaulting to 1000 [ 513.259924][T14352] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 513.306343][T14352] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2112'. [ 513.348410][T14355] lo speed is unknown, defaulting to 1000 [ 513.435520][T14355] wg1 speed is unknown, defaulting to 1000 [ 513.443766][T14357] netlink: 'syz.0.2111': attribute type 1 has an invalid length. [ 513.541029][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2112'. [ 513.728002][T14376] lo speed is unknown, defaulting to 1000 [ 513.736817][T14376] wg1 speed is unknown, defaulting to 1000 [ 513.770910][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2116'. [ 513.821135][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2116'. [ 514.055538][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 514.111734][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 514.167323][T14397] netlink: 'syz.5.2122': attribute type 83 has an invalid length. [ 514.233369][T14405] netlink: 'syz.4.2123': attribute type 10 has an invalid length. [ 514.247746][T14405] dummy0: entered promiscuous mode [ 514.263215][T14405] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 514.277867][T14409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2125'. [ 514.436931][T14418] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 514.467651][T14420] geneve4: entered promiscuous mode [ 514.500283][T14420] geneve4: entered allmulticast mode [ 514.616438][T14417] batadv_slave_0: entered promiscuous mode [ 514.629679][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2125'. [ 514.853353][T14443] netlink: 'syz.3.2133': attribute type 10 has an invalid length. [ 514.875662][T14443] `: Port device 0! added [ 514.882989][T14443] netlink: 'syz.3.2133': attribute type 10 has an invalid length. [ 514.916097][T14443] `: Port device 0! removed [ 514.928161][T14443] bond0: (slave 0!): Enslaving as an active interface with an up link [ 515.198104][T14456] lo speed is unknown, defaulting to 1000 [ 515.206567][T14456] wg1 speed is unknown, defaulting to 1000 [ 515.908083][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 515.941463][T14490] veth1_to_bond: entered promiscuous mode [ 515.948618][T14490] veth1_to_bond: entered allmulticast mode [ 516.029521][T14483] lo speed is unknown, defaulting to 1000 [ 516.044045][T14483] wg1 speed is unknown, defaulting to 1000 [ 516.236276][T14511] netlink: 'syz.5.2148': attribute type 33 has an invalid length. [ 516.335210][T14517] netlink: zone id is out of range [ 516.409756][T14511] lo speed is unknown, defaulting to 1000 [ 516.421752][T14511] wg1 speed is unknown, defaulting to 1000 [ 517.231886][T14545] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 517.780472][T14574] @: renamed from veth0_vlan [ 517.824778][T14579] bridge_slave_0: entered promiscuous mode [ 517.850264][T14579] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 517.891164][T14580] netlink: 'syz.5.2169': attribute type 15 has an invalid length. [ 517.925136][T14583] netlink: 'syz.0.2171': attribute type 10 has an invalid length. [ 517.954153][T14580] __nla_validate_parse: 9 callbacks suppressed [ 517.954172][T14580] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2169'. [ 517.960644][T14583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 517.982128][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2172'. [ 518.358788][T14590] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 518.401473][T14590] syzkaller0: entered promiscuous mode [ 518.407013][T14590] syzkaller0: entered allmulticast mode [ 518.445144][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2177'. [ 518.454201][T14602] lo speed is unknown, defaulting to 1000 [ 518.788078][T14632] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2178'. [ 520.242490][T14602] wg1 speed is unknown, defaulting to 1000 [ 520.264072][T14625] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2180'. [ 520.400953][T14620] syzkaller0: entered promiscuous mode [ 520.413915][T14620] syzkaller0: entered allmulticast mode [ 520.979083][T14664] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 520.996421][T14664] sctp: [Deprecated]: syz.3.2187 (pid 14664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.996421][T14664] Use struct sctp_sack_info instead [ 522.446297][T14656] lo speed is unknown, defaulting to 1000 [ 522.510421][T14656] wg1 speed is unknown, defaulting to 1000 [ 522.702519][T14691] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2194'. [ 522.900356][T14708] netlink: 'syz.0.2197': attribute type 10 has an invalid length. [ 522.921199][T14709] IPVS: length: 132 != 8 [ 522.934173][T14709] pimreg: entered allmulticast mode [ 522.940082][T14709] pimreg: left allmulticast mode [ 523.241213][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 523.261146][T14728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2203'. [ 523.310167][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 523.711113][T14756] tipc: Enabled bearer , priority 0 [ 523.756002][T14754] lo speed is unknown, defaulting to 1000 [ 523.757617][T14757] syzkaller1: entered promiscuous mode [ 523.800110][T14757] syzkaller1: entered allmulticast mode [ 523.823650][T14756] syzkaller0: entered promiscuous mode [ 523.829187][T14756] syzkaller0: entered allmulticast mode [ 523.857842][T14754] wg1 speed is unknown, defaulting to 1000 [ 523.897486][T14756] tipc: Resetting bearer [ 524.769286][T14753] tipc: Resetting bearer [ 524.810656][T14753] tipc: Disabling bearer [ 524.868800][ T8346] tipc: Node number set to 3173895001 [ 524.909830][T14774] netlink: 'syz.3.2213': attribute type 1 has an invalid length. [ 524.929013][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2214'. [ 524.959437][T14775] netlink: 'syz.5.2214': attribute type 1 has an invalid length. [ 525.018559][T14774] 8021q: adding VLAN 0 to HW filter on device bond6 [ 525.061674][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2214'. [ 525.071593][T14781] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 525.109823][T14777] 8021q: adding VLAN 0 to HW filter on device bond6 [ 525.129297][T14777] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 525.156704][T14777] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 525.283121][T14779] netlink: 'syz.4.2215': attribute type 3 has an invalid length. [ 525.675011][T14793] netlink: 'syz.0.2217': attribute type 2 has an invalid length. [ 525.683001][T14793] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 525.691782][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 525.763669][T14795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2218'. [ 525.783215][T14795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2218'. [ 525.800359][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 525.938493][T14800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2220'. [ 526.170428][T14806] netlink: 'syz.4.2223': attribute type 39 has an invalid length. [ 526.186966][T14807] netlink: 'syz.1.2222': attribute type 15 has an invalid length. [ 526.271359][T14809] vlan0: entered promiscuous mode [ 526.559695][T14823] tipc: Enabled bearer , priority 0 [ 526.608225][T14827] tipc: Enabled bearer , priority 0 [ 526.639011][T14827] syzkaller0: entered promiscuous mode [ 526.651895][T14827] syzkaller0: entered allmulticast mode [ 526.722881][T14823] tipc: Disabling bearer [ 527.028684][ T30] audit: type=1800 audit(1766230087.542:2): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2236" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1298 res=0 errno=0 [ 527.387890][T14824] tipc: Resetting bearer [ 527.557705][T14884] xt_TCPMSS: Only works on TCP SYN packets [ 527.622967][T14824] tipc: Disabling bearer [ 527.714011][T14893] netlink: 'syz.0.2248': attribute type 1 has an invalid length. [ 527.747742][T14882] lo speed is unknown, defaulting to 1000 [ 528.009462][T14882] wg1 speed is unknown, defaulting to 1000 [ 528.376382][T14917] __nla_validate_parse: 9 callbacks suppressed [ 528.376406][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2250'. [ 529.916447][T14908] tipc: Enabled bearer , priority 0 [ 529.936419][T14910] syzkaller0: entered promiscuous mode [ 529.942881][T14910] syzkaller0: entered allmulticast mode [ 530.079890][T14910] tipc: Resetting bearer [ 530.152532][T14910] tipc: Disabling bearer [ 530.201883][T14930] lo speed is unknown, defaulting to 1000 [ 530.210416][T14930] wg1 speed is unknown, defaulting to 1000 [ 530.502140][T14942] netlink: 'syz.4.2257': attribute type 4 has an invalid length. [ 530.832078][T14939] lo speed is unknown, defaulting to 1000 [ 530.841065][T14939] wg1 speed is unknown, defaulting to 1000 [ 531.152137][T14961] gre2: entered allmulticast mode [ 531.165510][T14958] netlink: 'syz.3.2262': attribute type 6 has an invalid length. [ 531.342873][T14973] batman_adv: batadv0: Adding interface: vlan3 [ 531.359884][T14973] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.419095][T14973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.433241][T14973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.443798][T14973] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 531.484394][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2269'. [ 531.522758][T14982] sctp: [Deprecated]: syz.3.2268 (pid 14982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.522758][T14982] Use struct sctp_sack_info instead [ 531.565296][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 531.640578][T14994] netlink: 'syz.5.2273': attribute type 1 has an invalid length. [ 531.652846][T14996] netlink: 'syz.5.2273': attribute type 1 has an invalid length. [ 531.664525][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2273'. [ 531.714054][ T52] block nbd1: Receive control failed (result -1) [ 531.730580][T15003] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 531.747059][T14992] bond6: option tlb_dynamic_lb: invalid value (5) [ 531.797420][T14992] bond6 (unregistering): Released all slaves [ 532.319531][T15034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2277'. [ 532.364106][T15035] veth1_to_bond: left promiscuous mode [ 532.395379][T15035] batadv_slave_0: left promiscuous mode [ 532.404716][T15035] vlan0: left promiscuous mode [ 532.412651][T15035] ip6tnl1: left promiscuous mode [ 532.427170][T15035] bond2: left promiscuous mode [ 532.443639][T15035] bond3: left promiscuous mode [ 532.460999][T15035] ip6gre1: left promiscuous mode [ 532.468969][T15035] vti0: left promiscuous mode [ 532.492039][T13915] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.501563][T15035] macvlan2: left promiscuous mode [ 532.506835][T15035] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 532.545654][T15055] sock: sock_set_timeout: `syz.3.2281' (pid 15055) tries to set negative timeout [ 532.742808][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2275'. [ 532.756241][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2275'. [ 533.077020][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 533.086298][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 533.110376][T13915] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 533.163466][T15084] lo speed is unknown, defaulting to 1000 [ 533.171050][T15094] netlink: 'syz.0.2292': attribute type 1 has an invalid length. [ 533.191510][T15084] wg1 speed is unknown, defaulting to 1000 [ 533.244013][T15096] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 533.534415][T15100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2295'. [ 533.574618][T15100] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2295'. [ 533.602578][T15100] netlink: 'syz.0.2295': attribute type 6 has an invalid length. [ 533.626742][T15111] syzkaller0: entered promiscuous mode [ 533.637861][T15111] syzkaller0: entered allmulticast mode [ 533.649674][T15100] netlink: 'syz.0.2295': attribute type 5 has an invalid length. [ 533.672190][T15100] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2295'. [ 533.694506][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 533.723161][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 534.011253][T15131] can: request_module (can-proto-5) failed. [ 534.048452][T15137] TCP: TCP_TX_DELAY enabled [ 534.062394][T15137] batadv0: mtu less than device minimum [ 534.432210][T15147] lo speed is unknown, defaulting to 1000 [ 534.440205][T15147] wg1 speed is unknown, defaulting to 1000 [ 534.645064][T15159] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2308'. [ 534.680565][T15159] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2308'. [ 534.682521][T15150] lo speed is unknown, defaulting to 1000 [ 534.699996][T15150] wg1 speed is unknown, defaulting to 1000 [ 534.885414][T15158] tipc: Enabled bearer , priority 0 [ 534.905850][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 534.927178][T15154] syzkaller0: entered promiscuous mode [ 534.933037][T15154] syzkaller0: entered allmulticast mode [ 534.947157][T15154] tipc: Resetting bearer [ 535.067566][T15163] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2310'. [ 535.482259][T15191] netlink: 'syz.3.2316': attribute type 1 has an invalid length. [ 535.494762][T15164] tipc: Resetting bearer [ 535.531811][T15164] tipc: Disabling bearer [ 535.569000][T15191] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 536.048230][T15212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.220474][T15222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.336813][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2325'. [ 536.390826][T15224] lo speed is unknown, defaulting to 1000 [ 536.450230][T15224] wg1 speed is unknown, defaulting to 1000 [ 536.753216][T15237] netlink: 'syz.0.2329': attribute type 2 has an invalid length. [ 536.791762][T15237] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 536.953754][T15243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.961070][T15243] IPv6: NLM_F_CREATE should be set when creating new route [ 536.988781][T15248] netlink: 'syz.3.2335': attribute type 30 has an invalid length. [ 536.991674][T15243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.003956][T15243] IPv6: NLM_F_CREATE should be set when creating new route [ 537.068844][T15253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.174566][T15262] syzkaller0: entered promiscuous mode [ 537.180405][T15262] syzkaller0: entered allmulticast mode [ 537.288075][T15270] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 537.343660][T15270] 8021q: adding VLAN 0 to HW filter on device bond5 [ 537.525437][T15286] x_tables: duplicate underflow at hook 2 [ 537.649947][T15291] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 537.806026][T15298] lo speed is unknown, defaulting to 1000 [ 537.825542][T15298] wg1 speed is unknown, defaulting to 1000 [ 537.863876][T15304] syzkaller0: entered promiscuous mode [ 537.870059][T15304] syzkaller0: entered allmulticast mode [ 538.010333][T15310] netlink: 'syz.4.2346': attribute type 12 has an invalid length. [ 538.658681][T15329] netlink: 'syz.1.2354': attribute type 6 has an invalid length. [ 538.713769][T15335] lo speed is unknown, defaulting to 1000 [ 538.732125][T15335] wg1 speed is unknown, defaulting to 1000 [ 538.817153][ T30] audit: type=1107 audit(1766230099.332:3): pid=15340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='𹠝!8)!vVX[257~@2HǑߌ-bopTZ4r!{@' [ 538.871140][T15346] tipc: Enabled bearer , priority 10 [ 538.919282][T15339] lo speed is unknown, defaulting to 1000 [ 538.984854][T15339] wg1 speed is unknown, defaulting to 1000 [ 539.108756][T15352] lo speed is unknown, defaulting to 1000 [ 539.145690][T15352] wg1 speed is unknown, defaulting to 1000 [ 539.272830][T15354] lo speed is unknown, defaulting to 1000 [ 539.339742][T15354] wg1 speed is unknown, defaulting to 1000 [ 539.429878][T15370] tipc: Enabled bearer , priority 0 [ 539.437449][T15370] syzkaller0: entered promiscuous mode [ 539.443157][T15370] syzkaller0: entered allmulticast mode [ 539.455171][T15370] tipc: Resetting bearer [ 539.464477][T15369] tipc: Resetting bearer [ 539.486159][T15369] tipc: Disabling bearer [ 539.525587][T15376] __nla_validate_parse: 10 callbacks suppressed [ 539.525607][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2365'. [ 539.545853][T15376] bond0: (slave rose0): Releasing backup interface [ 539.661763][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2367'. [ 540.179957][T15407] lo speed is unknown, defaulting to 1000 [ 540.196433][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2373'. [ 540.218948][T15407] wg1 speed is unknown, defaulting to 1000 [ 540.343777][T15406] lo speed is unknown, defaulting to 1000 [ 540.380836][T15406] wg1 speed is unknown, defaulting to 1000 [ 540.392056][T15418] syzkaller0: entered promiscuous mode [ 540.410712][T15418] syzkaller0: entered allmulticast mode [ 541.508623][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 541.535432][T15469] bridge0: entered allmulticast mode [ 541.578412][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 541.595466][T15464] hsr_slave_0: left promiscuous mode [ 541.607738][T15464] hsr_slave_1: left promiscuous mode [ 541.636538][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2388'. [ 541.815533][T15482] gretap0: entered promiscuous mode [ 541.824204][T15473] lo speed is unknown, defaulting to 1000 [ 541.836637][T15476] lo speed is unknown, defaulting to 1000 [ 541.844866][T15473] wg1 speed is unknown, defaulting to 1000 [ 541.876084][T15476] wg1 speed is unknown, defaulting to 1000 [ 542.098593][T15486] lo speed is unknown, defaulting to 1000 [ 542.183098][T15486] wg1 speed is unknown, defaulting to 1000 [ 542.346024][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2394'. [ 542.840116][T15516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.896020][T15516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.947457][ T9098] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 542.985859][ T9098] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 543.128916][T15539] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 543.192218][T15539] netlink: 'syz.0.2403': attribute type 2 has an invalid length. [ 543.198479][T15544] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2405'. [ 543.213453][T15546] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2405'. [ 543.264810][T15527] lo speed is unknown, defaulting to 1000 [ 543.300779][T15527] wg1 speed is unknown, defaulting to 1000 [ 543.472707][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 543.803880][T15551] netlink: 'syz.0.2407': attribute type 1 has an invalid length. [ 543.840490][T15551] netlink: 'syz.0.2407': attribute type 1 has an invalid length. [ 543.870822][T15560] lo speed is unknown, defaulting to 1000 [ 543.885627][T15560] wg1 speed is unknown, defaulting to 1000 [ 543.992794][T15566] batadv0: entered allmulticast mode [ 544.001328][T15566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.051667][T15568] syzkaller1: entered promiscuous mode [ 544.059669][T15571] netlink: 'syz.1.2414': attribute type 2 has an invalid length. [ 544.075411][T15568] syzkaller1: entered allmulticast mode [ 544.208574][T15576] lo speed is unknown, defaulting to 1000 [ 544.226911][T15576] wg1 speed is unknown, defaulting to 1000 [ 544.491331][T15583] lo speed is unknown, defaulting to 1000 [ 544.521441][T15583] wg1 speed is unknown, defaulting to 1000 [ 544.526294][T15594] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.174914][T15616] lo speed is unknown, defaulting to 1000 [ 545.194590][T15616] wg1 speed is unknown, defaulting to 1000 [ 545.755380][T15654] syzkaller0: entered promiscuous mode [ 545.761151][T15654] syzkaller0: entered allmulticast mode [ 546.195689][T15693] __nla_validate_parse: 8 callbacks suppressed [ 546.195710][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2441'. [ 546.217070][T15693] nbd: must specify at least one socket [ 546.240194][T15693] netlink: 'syz.3.2441': attribute type 3 has an invalid length. [ 546.248611][T15695] netlink: 'syz.5.2444': attribute type 9 has an invalid length. [ 546.270618][T15693] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 546.294552][T15693] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2441'. [ 546.348817][T15693] NCSI netlink: No device for ifindex 813332851 [ 546.850607][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2449'. [ 546.865053][T15731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2450'. [ 546.891723][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 547.067338][T15740] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2453'. [ 547.087281][T15740] syzkaller1: entered promiscuous mode [ 547.093027][T15740] syzkaller1: entered allmulticast mode [ 547.438901][T15743] syzkaller0: entered promiscuous mode [ 547.451444][T15743] syzkaller0: entered allmulticast mode [ 547.782407][T15756] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2457'. [ 547.797820][T15763] lo speed is unknown, defaulting to 1000 [ 547.806566][T15763] wg1 speed is unknown, defaulting to 1000 [ 548.641259][T15798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2469'. [ 548.910811][T15814] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2475'. [ 548.930082][T15814] nbd: must specify at least one socket [ 549.028412][T15819] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2473'. [ 551.096202][T15830] lo speed is unknown, defaulting to 1000 [ 551.135115][T15830] wg1 speed is unknown, defaulting to 1000 [ 551.567113][T15859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.581840][T15856] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 551.604287][T15862] __nla_validate_parse: 1 callbacks suppressed [ 551.604307][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 551.663233][T15851] lo speed is unknown, defaulting to 1000 [ 551.698714][T15851] wg1 speed is unknown, defaulting to 1000 [ 551.961463][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'. [ 552.016260][T15880] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2492'. [ 552.039715][T15876] netlink: 'syz.0.2490': attribute type 7 has an invalid length. [ 552.069224][T15880] nbd: couldn't find a device at index 0 [ 552.093474][T15884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2494'. [ 552.123968][T15680] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.132505][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'. [ 552.159684][T15680] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.167940][T15680] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.179841][T15876] netlink: 'syz.0.2490': attribute type 7 has an invalid length. [ 552.185594][T15889] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2493'. [ 552.213417][T15680] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.222199][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'. [ 552.239781][T15876] netlink: 'syz.0.2490': attribute type 7 has an invalid length. [ 552.507607][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2498'. [ 552.558958][T15900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2498'. [ 552.736767][T15908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2500'. [ 553.317096][T15922] Cannot find add_set index 2 as target [ 553.601682][T15935] Bluetooth: MGMT ver 1.23 [ 553.809060][T15938] tipc: Enabling of bearer rejected, failed to enable media [ 554.503332][T15971] tipc: Enabled bearer , priority 0 [ 554.594263][T15969] tipc: Disabling bearer [ 554.960540][T16001] netlink: zone id is out of range [ 554.966051][T16001] netlink: zone id is out of range [ 554.971928][T16001] netlink: zone id is out of range [ 554.977279][T16001] netlink: zone id is out of range [ 554.989875][T16001] netlink: zone id is out of range [ 554.995042][T16001] netlink: zone id is out of range [ 555.030672][T16001] netlink: zone id is out of range [ 555.046216][T16001] netlink: zone id is out of range [ 555.288791][T16019] tipc: Enabled bearer , priority 0 [ 555.371767][T16008] syzkaller0: entered promiscuous mode [ 555.394980][T16008] syzkaller0: entered allmulticast mode [ 555.395048][T16027] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 555.483049][T16033] netlink: 'syz.3.2539': attribute type 12 has an invalid length. [ 555.494795][T16033] netlink: 'syz.3.2539': attribute type 12 has an invalid length. [ 555.506354][T16019] tipc: Resetting bearer [ 555.541596][T16007] tipc: Resetting bearer [ 555.578138][T16007] tipc: Disabling bearer [ 555.679850][T16042] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 555.850792][T16042] 8021q: adding VLAN 0 to HW filter on device bond9 [ 555.923388][T16049] 8021q: adding VLAN 0 to HW filter on device bond9 [ 555.931795][T16049] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 555.943927][T16049] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 556.001821][T16054] veth9: entered promiscuous mode [ 556.013520][T16054] bond9: (slave veth9): Enslaving as an active interface with a down link [ 556.512381][T16090] netlink: 'syz.3.2554': attribute type 33 has an invalid length. [ 556.614617][T16095] lo speed is unknown, defaulting to 1000 [ 556.635547][T16095] wg1 speed is unknown, defaulting to 1000 [ 557.143295][T16132] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 557.158111][T16132] bond6 (unregistering): Released all slaves [ 557.188237][T16135] __nla_validate_parse: 16 callbacks suppressed [ 557.188253][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2563'. [ 557.785869][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2572'. [ 557.935388][T16171] lo speed is unknown, defaulting to 1000 [ 557.977686][T16171] wg1 speed is unknown, defaulting to 1000 [ 558.314335][T16196] netlink: 'syz.3.2578': attribute type 3 has an invalid length. [ 558.333432][T16197] netlink: 'syz.3.2578': attribute type 3 has an invalid length. [ 558.350310][T16196] netlink: 'syz.3.2578': attribute type 1 has an invalid length. [ 558.358598][T16197] netlink: 'syz.3.2578': attribute type 1 has an invalid length. [ 558.359525][T16196] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2578'. [ 558.366428][T16197] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2578'. [ 558.436370][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2578'. [ 558.470189][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2578'. [ 559.566303][T16231] netlink: 1076 bytes leftover after parsing attributes in process `syz.0.2586'. [ 559.587713][T16231] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 559.697350][T13911] IPVS: starting estimator thread 0... [ 559.799763][T16234] IPVS: using max 23 ests per chain, 55200 per kthread [ 560.581486][T16258] netlink: 'syz.3.2594': attribute type 1 has an invalid length. [ 560.724223][T16259] tipc: Resetting bearer [ 560.732031][T16259] bond0: left allmulticast mode [ 560.737286][T16259] bond_slave_0: left allmulticast mode [ 560.742891][T16259] bond_slave_1: left allmulticast mode [ 560.748548][T16259] bond0: left promiscuous mode [ 560.753631][T16259] bond_slave_0: left promiscuous mode [ 560.759434][T16259] bond_slave_1: left promiscuous mode [ 560.788042][ T5909] lo speed is unknown, defaulting to 1000 [ 560.794060][ T5909] syz1: Port: 1 Link DOWN [ 560.800156][ T73] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.808563][ T73] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.835972][ T73] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.845572][ T73] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.938842][T16274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2599'. [ 560.989954][T16274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2599'. [ 561.174655][T16289] netlink: 'syz.1.2602': attribute type 1 has an invalid length. [ 561.183608][T16291] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 561.436003][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2605'. [ 561.857247][T16321] netlink: 'syz.4.2609': attribute type 7 has an invalid length. [ 561.904208][T16321] netlink: 'syz.4.2609': attribute type 8 has an invalid length. [ 562.190690][T16331] __nla_validate_parse: 1 callbacks suppressed [ 562.190714][T16331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2611'. [ 562.323941][T16337] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 562.599795][T16354] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 562.721682][T16358] netlink: 'syz.0.2618': attribute type 13 has an invalid length. [ 562.749089][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 562.883759][T16365] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2619'. [ 562.983686][T16367] netlink: 'syz.3.2623': attribute type 3 has an invalid length. [ 563.054076][T16358] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 563.111775][T15681] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.148901][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 563.187129][T15681] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.202523][T15681] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.220394][T15681] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.499200][T16382] lo speed is unknown, defaulting to 1000 [ 563.509927][T16382] wg1 speed is unknown, defaulting to 1000 [ 563.746144][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2629'. [ 563.853167][T16390] validate_nla: 1 callbacks suppressed [ 563.853187][T16390] netlink: 'syz.0.2628': attribute type 4 has an invalid length. [ 563.876314][T16390] netlink: 'syz.0.2628': attribute type 1 has an invalid length. [ 564.017648][T16390] 8021q: adding VLAN 0 to HW filter on device bond6 [ 564.093670][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.106397][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.109719][T16393] ipvlan2: entered allmulticast mode [ 564.121046][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.130080][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.137806][T16393] bond6: entered allmulticast mode [ 564.143386][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 564.192321][T16395] bond6: (slave gretap1): making interface the new active one [ 564.200842][T16395] gretap1: entered allmulticast mode [ 564.207759][T16395] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 564.348580][T16398] lo speed is unknown, defaulting to 1000 [ 564.371619][T16398] wg1 speed is unknown, defaulting to 1000 [ 564.511807][T16402] tc_dump_action: action bad kind [ 564.843470][T16398] chnl_net:caif_netlink_parms(): no params data found [ 565.172964][T16419] netlink: 'syz.1.2633': attribute type 9 has an invalid length. [ 565.194286][T16398] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.202078][T16398] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.210207][T16398] bridge_slave_0: entered allmulticast mode [ 565.218571][T16398] bridge_slave_0: entered promiscuous mode [ 565.245838][T16398] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.254388][T16398] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.269106][T16398] bridge_slave_1: entered allmulticast mode [ 565.286433][T16398] bridge_slave_1: entered promiscuous mode [ 565.372965][T16398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.406066][T16398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.509035][T16398] team0: Port device team_slave_0 added [ 565.530911][T16398] team0: Port device team_slave_1 added [ 565.597762][T16398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.619993][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.647876][T16398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.667964][T16398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.675442][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.717542][T16398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.838428][T16443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2640'. [ 565.867185][T16443] netlink: 'syz.3.2640': attribute type 4 has an invalid length. [ 565.877305][T16398] hsr_slave_0: entered promiscuous mode [ 565.885308][T16398] hsr_slave_1: entered promiscuous mode [ 565.893582][T16443] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 566.046766][T16453] pim6reg1: entered promiscuous mode [ 566.056808][T16453] pim6reg1: entered allmulticast mode [ 566.097809][T16453] net_ratelimit: 3 callbacks suppressed [ 566.097831][T16453] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 566.181487][ T5829] Bluetooth: hci5: command tx timeout [ 566.325006][T16468] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2647'. [ 566.339527][T16470] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2644'. [ 566.365544][T16468] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2647'. [ 566.465305][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2650'. [ 566.657820][T16483] netlink: 'syz.1.2651': attribute type 29 has an invalid length. [ 566.668326][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 566.714210][T16398] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 566.746697][T16398] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 566.768974][T16398] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 566.838693][T16398] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 567.214603][ T30] audit: type=1800 audit(1766230127.732:4): pid=16512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2655" name="memory.events" dev="tmpfs" ino=2792 res=0 errno=0 [ 567.238281][T16398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.284900][ T30] audit: type=1804 audit(1766230127.772:5): pid=16512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2655" name="memory.events" dev="tmpfs" ino=2792 res=1 errno=0 [ 567.309049][T16398] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.352490][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.359754][ T9067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.391560][T15670] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.399187][T15670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.444625][T16523] netlink: 'syz.5.2657': attribute type 3 has an invalid length. [ 567.571874][T16526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.582590][T16526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.597343][T16526] __nla_validate_parse: 2 callbacks suppressed [ 567.597361][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 567.614010][T16526] netlink: 39 bytes leftover after parsing attributes in process `syz.1.2659'. [ 567.793551][T16538] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2661'. [ 567.861433][T16536] lo speed is unknown, defaulting to 1000 [ 567.891710][T16536] wg1 speed is unknown, defaulting to 1000 [ 568.033363][T16544] tipc: Enabled bearer , priority 0 [ 568.047394][T16398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.058261][T16544] syzkaller0: entered promiscuous mode [ 568.064585][T16544] syzkaller0: entered allmulticast mode [ 568.093915][T16544] tipc: Resetting bearer [ 568.104309][T16544] xt_hashlimit: max too large, truncated to 1048576 [ 568.129642][T16543] tipc: Resetting bearer [ 568.151726][T16543] tipc: Disabling bearer [ 568.159368][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.167821][ C1] lec:lec_tx_timeout: lec0 [ 568.216673][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2664'. [ 568.262759][ T5829] Bluetooth: hci5: command tx timeout [ 568.522440][T16562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2667'. [ 568.544324][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2667'. [ 568.574733][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2667'. [ 568.593172][T16562] netlink: 'syz.1.2667': attribute type 14 has an invalid length. [ 568.609947][T16398] veth0_vlan: entered promiscuous mode [ 568.647380][T16398] veth1_vlan: entered promiscuous mode [ 568.746017][T16398] veth0_macvtap: entered promiscuous mode [ 568.774949][T16398] veth1_macvtap: entered promiscuous mode [ 568.805005][T16398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.821860][T16571] siw: device registration error -23 [ 568.825879][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'. [ 568.832200][T16398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.845365][T16571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2670'. [ 568.884697][T15671] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.915394][T15671] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.933529][T15671] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.961390][T15671] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.091191][T16583] x_tables: duplicate underflow at hook 1 [ 569.173607][T16583] No such timeout policy "syz1" [ 569.225936][T15680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.245664][T15680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.343257][T15670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.375930][T15670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.520199][T16601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2678'. [ 569.588041][T16606] sctp: [Deprecated]: syz.1.2682 (pid 16606) Use of int in max_burst socket option. [ 569.588041][T16606] Use struct sctp_assoc_value instead [ 569.827161][T16601] nbd: socks must be embedded in a SOCK_ITEM attr [ 569.844669][T16616] netlink: 'syz.5.2681': attribute type 1 has an invalid length. [ 569.895644][T16619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.908852][T16620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.309122][T16622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.341808][ T5829] Bluetooth: hci5: command tx timeout [ 570.723440][T16646] netlink: 'syz.3.2690': attribute type 8 has an invalid length. [ 570.954678][T16657] syzkaller1: entered promiscuous mode [ 570.967124][T16657] syzkaller1: entered allmulticast mode [ 571.523955][T16700] caif0: entered promiscuous mode [ 571.536931][T16700] caif0: entered allmulticast mode [ 571.750945][T16708] lo speed is unknown, defaulting to 1000 [ 571.766984][T16708] wg1 speed is unknown, defaulting to 1000 [ 572.194297][T16720] lo speed is unknown, defaulting to 1000 [ 572.220932][T16720] wg1 speed is unknown, defaulting to 1000 [ 572.422143][ T5829] Bluetooth: hci5: command tx timeout [ 572.726988][T16753] __nla_validate_parse: 8 callbacks suppressed [ 572.727011][T16753] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2719'. [ 572.734884][T16748] tipc: Enabled bearer , priority 0 [ 572.782196][T16748] syzkaller0: entered promiscuous mode [ 572.787730][T16748] syzkaller0: entered allmulticast mode [ 572.802754][T16751] netlink: 'syz.5.2719': attribute type 11 has an invalid length. [ 572.842892][T16751] netlink: 'syz.5.2719': attribute type 11 has an invalid length. [ 572.862869][T16751] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2719'. [ 572.913739][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'. [ 573.087705][T16765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.714086][T16780] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 575.082153][T16755] tipc: Resetting bearer [ 575.158192][T16747] tipc: Resetting bearer [ 575.213784][T16747] tipc: Disabling bearer [ 575.268104][T16795] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2727'. [ 575.295386][T16798] netlink: 'syz.0.2728': attribute type 1 has an invalid length. [ 575.377591][T16800] gretap2: entered promiscuous mode [ 575.407208][T16798] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 575.584138][T16804] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.600623][T16804] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.648575][T16820] netlink: 'syz.0.2733': attribute type 1 has an invalid length. [ 575.669047][T16804] caif0: left promiscuous mode [ 575.675736][T16804] caif0: left allmulticast mode [ 575.836072][T16804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.858061][T16804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.095023][T16823] tipc: Enabling of bearer rejected, failed to enable media [ 576.229697][T15680] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.258982][T15680] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.544132][T15680] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.631927][T16853] bond0: (slave bond_slave_0): Releasing backup interface [ 576.647237][T16853] bond0: (slave bond_slave_1): Releasing backup interface [ 576.664331][T16853] team0: Port device team_slave_0 removed [ 576.675577][T16853] team0: Port device team_slave_1 removed [ 576.682365][T16853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.691757][T16853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.722763][T16868] openvswitch: netlink: Message has -2 unknown bytes. [ 576.729822][T16868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.729933][T15680] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.877341][ T30] audit: type=1800 audit(1766230137.392:6): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2739" name="memory.events" dev="tmpfs" ino=2726 res=0 errno=0 [ 576.902962][T16871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2739'. [ 576.933131][T16871] netlink: 'syz.0.2739': attribute type 28 has an invalid length. [ 577.193334][T16890] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 577.204595][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2746'. [ 577.221092][T16890] batman_adv: batadv0: Adding interface: gretap1 [ 577.235484][T16890] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.313623][T16890] batman_adv: batadv0: Interface activated: gretap1 [ 577.364407][T16899] netlink: 'syz.5.2749': attribute type 10 has an invalid length. [ 577.543466][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 577.729024][T16923] pim6reg1: entered promiscuous mode [ 577.741050][T16923] pim6reg1: entered allmulticast mode [ 577.845340][T16935] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 577.873460][T16934] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 577.881686][T16935] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 577.901261][T16935] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 577.909697][T16935] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 577.910906][T16934] set match dimension is over the limit! [ 577.927844][T16935] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 578.105291][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2765'. [ 578.146461][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'. [ 578.351313][T16961] lo speed is unknown, defaulting to 1000 [ 578.372609][T16961] wg1 speed is unknown, defaulting to 1000 [ 578.526202][T16972] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2774'. [ 578.579234][T16972] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2774'. [ 578.601362][T16972] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2774'. [ 578.641685][T16972] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2774'. [ 578.733999][T16982] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2777'. [ 578.768284][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 578.768735][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2776'. [ 578.946584][T16987] bond5 (unregistering): Released all slaves [ 579.018506][T16994] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2779'. [ 579.079529][ T5909] IPVS: starting estimator thread 0... [ 579.181017][T16996] IPVS: using max 21 ests per chain, 50400 per kthread [ 580.066496][T17049] tap0: tun_chr_ioctl cmd 1074025677 [ 580.125668][T17049] tap0: linktype set to 1 [ 580.154598][T17048] tap0: tun_chr_ioctl cmd 1074025677 [ 580.177256][T17048] tap0: linktype set to 1 [ 580.253928][T17059] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 580.285531][T17060] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 580.658150][T17068] validate_nla: 33 callbacks suppressed [ 580.658174][T17068] netlink: 'syz.1.2796': attribute type 1 has an invalid length. [ 580.713202][T17075] FAULT_INJECTION: forcing a failure. [ 580.713202][T17075] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 580.741140][T17075] CPU: 1 UID: 0 PID: 17075 Comm: syz.4.2797 Not tainted syzkaller #0 PREEMPT(full) [ 580.741169][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.741181][T17075] Call Trace: [ 580.741189][T17075] [ 580.741199][T17075] dump_stack_lvl+0x189/0x250 [ 580.741229][T17075] ? __pfx____ratelimit+0x10/0x10 [ 580.741251][T17075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.741275][T17075] ? __pfx__printk+0x10/0x10 [ 580.741305][T17075] ? __might_fault+0xb0/0x130 [ 580.741349][T17075] should_fail_ex+0x414/0x560 [ 580.741386][T17075] _copy_from_iter+0x1cd/0x1630 [ 580.741413][T17075] ? __build_skb_around+0x22d/0x3c0 [ 580.741443][T17075] ? __pfx__copy_from_iter+0x10/0x10 [ 580.741461][T17075] ? __alloc_skb+0x2f1/0x430 [ 580.741485][T17075] ? __pfx___alloc_skb+0x10/0x10 [ 580.741519][T17075] ? netlink_sendmsg+0x642/0xb30 [ 580.741543][T17075] ? skb_put+0x11b/0x210 [ 580.741569][T17075] netlink_sendmsg+0x6b2/0xb30 [ 580.741606][T17075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.741637][T17075] ? aa_sock_msg_perm+0xf1/0x1b0 [ 580.741664][T17075] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 580.741683][T17075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.741709][T17075] __sock_sendmsg+0x21c/0x270 [ 580.741738][T17075] ____sys_sendmsg+0x505/0x820 [ 580.741767][T17075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.741802][T17075] ? import_iovec+0x74/0xa0 [ 580.741828][T17075] ___sys_sendmsg+0x21f/0x2a0 [ 580.741855][T17075] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.741887][T17075] ? rcu_read_lock_any_held+0xb3/0x120 [ 580.741939][T17075] ? __fget_files+0x2a/0x420 [ 580.741963][T17075] ? __fget_files+0x3a0/0x420 [ 580.741999][T17075] __x64_sys_sendmsg+0x19b/0x260 [ 580.742025][T17075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.742060][T17075] ? __pfx_ksys_write+0x10/0x10 [ 580.742085][T17075] ? do_syscall_64+0xbe/0xf80 [ 580.742110][T17075] do_syscall_64+0xfa/0xf80 [ 580.742132][T17075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.742151][T17075] ? clear_bhb_loop+0x60/0xb0 [ 580.742175][T17075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.742194][T17075] RIP: 0033:0x7f86f6f8f749 [ 580.742214][T17075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.742231][T17075] RSP: 002b:00007f86f7da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.742255][T17075] RAX: ffffffffffffffda RBX: 00007f86f71e5fa0 RCX: 00007f86f6f8f749 [ 580.742269][T17075] RDX: 000000002004c888 RSI: 0000200000000280 RDI: 0000000000000004 [ 580.742283][T17075] RBP: 00007f86f7da7090 R08: 0000000000000000 R09: 0000000000000000 [ 580.742295][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.742307][T17075] R13: 00007f86f71e6038 R14: 00007f86f71e5fa0 R15: 00007ffd11a9e9a8 [ 580.742340][T17075] [ 581.179195][T17086] netlink: zone id is out of range [ 581.191238][T17086] netlink: zone id is out of range [ 581.231691][T17086] netlink: set zone limit has 8 unknown bytes [ 581.269678][T17086] netlink: 'syz.4.2804': attribute type 5 has an invalid length. [ 581.649027][T17104] lo speed is unknown, defaulting to 1000 [ 581.661385][T17104] wg1 speed is unknown, defaulting to 1000 [ 581.825000][T17112] netlink: 'syz.3.2809': attribute type 15 has an invalid length. [ 582.387796][T17133] netlink: 'syz.5.2815': attribute type 6 has an invalid length. [ 582.556927][T17138] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 582.587153][T17138] bridge_slave_0: left allmulticast mode [ 582.616766][T17138] bridge_slave_0: left promiscuous mode [ 582.634721][T17138] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.677310][T17138] bridge_slave_1: left allmulticast mode [ 582.712010][T17138] bridge_slave_1: left promiscuous mode [ 582.734130][T17148] netlink: 'syz.4.2817': attribute type 10 has an invalid length. [ 582.761735][T17138] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.826950][T17138] bond0: (slave bond_slave_0): Releasing backup interface [ 582.862508][T17138] bond0: (slave bond_slave_1): Releasing backup interface [ 582.894323][T17138] team0: Port device team_slave_0 removed [ 582.905205][T17138] team0: Port device team_slave_1 removed [ 582.924025][T17138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.940823][T17138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.960453][T17138] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 583.017999][T17148] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 583.044245][T17148] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 583.272413][T17168] __nla_validate_parse: 12 callbacks suppressed [ 583.272435][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'. [ 583.330903][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'. [ 583.388886][T17170] syzkaller0: entered promiscuous mode [ 583.395834][T17170] syzkaller0: entered allmulticast mode [ 583.420748][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'. [ 583.612161][T17191] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2829'. [ 583.637110][T17178] sock: sock_set_timeout: `syz.1.2826' (pid 17178) tries to set negative timeout [ 583.772351][T17197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2831'. [ 584.284659][T17219] netlink: 'syz.0.2837': attribute type 9 has an invalid length. [ 584.292917][T17219] netlink: 'syz.0.2837': attribute type 11 has an invalid length. [ 584.301907][T17219] netlink: 'syz.0.2837': attribute type 12 has an invalid length. [ 584.317205][T17219] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2837'. [ 584.327124][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2837'. [ 584.481687][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2839'. [ 584.665172][T17235] lo speed is unknown, defaulting to 1000 [ 584.692962][T17235] wg1 speed is unknown, defaulting to 1000 [ 585.121884][T17263] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2848'. [ 585.135186][T17257] netlink: 'syz.5.2847': attribute type 10 has an invalid length. [ 585.153135][T17257] team0: Port device netdevsim0 added [ 585.169965][T17264] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2848'. [ 585.343763][T17276] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 586.035379][T17306] lo speed is unknown, defaulting to 1000 [ 586.046468][T17306] wg1 speed is unknown, defaulting to 1000 [ 586.437272][T17343] netlink: 'syz.3.2873': attribute type 4 has an invalid length. [ 586.494774][T17338] nbd: couldn't find a device at index 0 [ 586.601198][T17353] FAULT_INJECTION: forcing a failure. [ 586.601198][T17353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.630363][T17353] CPU: 0 UID: 0 PID: 17353 Comm: syz.4.2877 Not tainted syzkaller #0 PREEMPT(full) [ 586.630390][T17353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.630401][T17353] Call Trace: [ 586.630408][T17353] [ 586.630416][T17353] dump_stack_lvl+0x189/0x250 [ 586.630442][T17353] ? __pfx____ratelimit+0x10/0x10 [ 586.630461][T17353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.630490][T17353] ? __pfx__printk+0x10/0x10 [ 586.630528][T17353] should_fail_ex+0x414/0x560 [ 586.630560][T17353] _copy_to_user+0x31/0xb0 [ 586.630584][T17353] simple_read_from_buffer+0xe1/0x170 [ 586.630611][T17353] proc_fail_nth_read+0x1b3/0x220 [ 586.630634][T17353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.630656][T17353] ? rw_verify_area+0x2a6/0x4d0 [ 586.630673][T17353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.630693][T17353] vfs_read+0x200/0xa30 [ 586.630709][T17353] ? fdget_pos+0x247/0x320 [ 586.630735][T17353] ? __pfx___mutex_lock+0x10/0x10 [ 586.630755][T17353] ? __pfx_vfs_read+0x10/0x10 [ 586.630774][T17353] ? __fget_files+0x2a/0x420 [ 586.630800][T17353] ? __fget_files+0x3a0/0x420 [ 586.630819][T17353] ? __fget_files+0x2a/0x420 [ 586.630849][T17353] ksys_read+0x145/0x250 [ 586.630870][T17353] ? __pfx_ksys_read+0x10/0x10 [ 586.630892][T17353] ? do_syscall_64+0xbe/0xf80 [ 586.630914][T17353] do_syscall_64+0xfa/0xf80 [ 586.630933][T17353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.630950][T17353] ? clear_bhb_loop+0x60/0xb0 [ 586.630971][T17353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.630987][T17353] RIP: 0033:0x7f86f6f8e15c [ 586.631005][T17353] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 586.631020][T17353] RSP: 002b:00007f86f7da7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.631040][T17353] RAX: ffffffffffffffda RBX: 00007f86f71e5fa0 RCX: 00007f86f6f8e15c [ 586.631052][T17353] RDX: 000000000000000f RSI: 00007f86f7da70a0 RDI: 0000000000000003 [ 586.631063][T17353] RBP: 00007f86f7da7090 R08: 0000000000000000 R09: 0000000000000000 [ 586.631074][T17353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.631084][T17353] R13: 00007f86f71e6038 R14: 00007f86f71e5fa0 R15: 00007ffd11a9e9a8 [ 586.631120][T17353] [ 588.065299][T17403] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 588.090887][T17403] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 588.171469][T17403] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 588.205106][T17408] 0{X: left allmulticast mode [ 588.298644][T17408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.362679][T17408] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.435492][T17408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.478952][T17425] !: entered allmulticast mode [ 588.613735][T17423] lo speed is unknown, defaulting to 1000 [ 588.652123][T17423] wg1 speed is unknown, defaulting to 1000 [ 588.780562][T17434] __nla_validate_parse: 11 callbacks suppressed [ 588.780584][T17434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2895'. [ 588.973401][T17452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2899'. [ 589.132654][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2900'. [ 589.174300][T17456] tipc: Resetting bearer [ 589.197321][T17456] tipc: Resetting bearer [ 589.212304][ T5909] lo speed is unknown, defaulting to 1000 [ 589.217201][T17438] lo speed is unknown, defaulting to 1000 [ 589.260076][T17459] 8021q: adding VLAN 0 to HW filter on device bond8 [ 589.273110][T17462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.285251][T17462] bond8: (slave bond0): Enslaving as an active interface with an up link [ 589.420011][T17438] wg1 speed is unknown, defaulting to 1000 [ 589.699245][T17464] bond8 (unregistering): (slave bond0): Releasing backup interface [ 589.709277][T17464] bond8 (unregistering): Released all slaves [ 590.085770][T17489] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2905'. [ 590.234692][T17495] tipc: Enabling of bearer rejected, failed to enable media [ 590.360896][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2906'. [ 590.506572][T17500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.553370][T17500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.597837][ T5909] lo speed is unknown, defaulting to 1000 [ 590.622037][ T5909] syz1: Port: 1 Link ACTIVE [ 590.773690][T17520] openvswitch: netlink: IP tunnel dst address not specified [ 591.223175][T17547] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2915'. [ 591.250450][T17549] tipc: Started in network mode [ 591.255483][T17549] tipc: Node identity 9e67d34fc50a, cluster identity 4711 [ 591.271555][T17549] tipc: Enabled bearer , priority 0 [ 591.283909][T17545] syzkaller0: entered promiscuous mode [ 591.299978][T17545] syzkaller0: entered allmulticast mode [ 591.405367][T17557] lo speed is unknown, defaulting to 1000 [ 591.433997][T17557] wg1 speed is unknown, defaulting to 1000 [ 591.510758][T17544] tipc: Resetting bearer [ 591.527200][T17544] tipc: Disabling bearer [ 591.857720][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2924'. [ 593.553420][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 593.621508][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 593.632896][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 593.644036][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 593.653460][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 594.024878][T17631] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 594.086865][T17625] lo speed is unknown, defaulting to 1000 [ 594.251404][T17625] wg1 speed is unknown, defaulting to 1000 [ 594.481536][T17655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2942'. [ 594.498293][T17654] tipc: Cannot configure node identity twice [ 594.516586][T17645] netlink: 'syz.5.2940': attribute type 10 has an invalid length. [ 594.527048][T17645] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2940'. [ 594.620443][T17645] batadv_slave_1: entered promiscuous mode [ 594.628070][T17645] bridge0: port 3(batadv_slave_1) entered blocking state [ 594.645000][T17645] bridge0: port 3(batadv_slave_1) entered disabled state [ 594.653843][T17645] batadv_slave_1: entered allmulticast mode [ 594.678605][T17667] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 594.881746][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 594.905469][T17683] netlink: 'syz.4.2949': attribute type 1 has an invalid length. [ 595.000695][T17687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.013965][T17690] pimreg: entered allmulticast mode [ 595.063698][ T569] batman_adv: batadv0: Interface deactivated: gretap1 [ 595.299112][ T569] batman_adv: batadv0: Removing interface: gretap1 [ 595.679028][ T569] tipc: Disabling bearer [ 595.694044][ T569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.704936][ T569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.715875][ T569] bond0 (unregistering): Released all slaves [ 595.731331][ T569] bond1 (unregistering): Released all slaves [ 595.745086][ T569] bond2 (unregistering): Released all slaves [ 595.757761][ T569] bond3 (unregistering): Released all slaves [ 595.796710][ T52] Bluetooth: hci1: command tx timeout [ 595.893452][ T569] bond4 (unregistering): (slave veth3): Releasing active interface [ 595.906300][ T569] dummy0: entered promiscuous mode [ 595.914275][ T569] bond4 (unregistering): (slave dummy0): Releasing active interface [ 595.924718][ T569] bond4 (unregistering): Released all slaves [ 596.041565][ T569] bond5 (unregistering): Released all slaves [ 596.054503][ T569] bond6 (unregistering): Released all slaves [ 596.090987][T17683] veth3: entered promiscuous mode [ 596.104061][T17683] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 596.147194][T17700] bond0: (slave rose0): Error: Device can not be enslaved while up [ 596.230521][ T569] : left promiscuous mode [ 596.358730][T17625] chnl_net:caif_netlink_parms(): no params data found [ 596.396376][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2955'. [ 596.407743][T17715] netlink: 'syz.5.2955': attribute type 30 has an invalid length. [ 596.431722][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2955'. [ 596.448474][ T569] tipc: Disabling bearer [ 596.479141][ T569] tipc: Left network mode [ 596.839096][T17743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2963'. [ 596.984054][T17625] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.996912][T17625] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.006727][T17625] bridge_slave_0: entered allmulticast mode [ 597.020300][T17625] bridge_slave_0: entered promiscuous mode [ 597.070837][T17625] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.081827][T17625] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.101815][T17625] bridge_slave_1: entered allmulticast mode [ 597.110574][T17625] bridge_slave_1: entered promiscuous mode [ 597.134377][T17740] lo speed is unknown, defaulting to 1000 [ 597.171176][T17740] wg1 speed is unknown, defaulting to 1000 [ 597.262194][T17625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.277539][T17625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.290727][T17759] openvswitch: netlink: Invalid VLAN frame [ 597.400816][ T569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.408991][ T569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.500848][ T569] pimreg (unregistering): left allmulticast mode [ 597.863641][ T52] Bluetooth: hci1: command tx timeout [ 598.242400][T17625] team0: Port device team_slave_0 added [ 598.276049][T17625] team0: Port device team_slave_1 added [ 598.295423][ T8346] lo speed is unknown, defaulting to 1000 [ 598.304898][ T8346] syz1: Port: 1 Link DOWN [ 598.437896][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 598.478317][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 598.534042][T17625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.551861][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.598210][T17625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.668636][T17625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.668710][T17780] netlink: 'syz.4.2972': attribute type 1 has an invalid length. [ 598.676993][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.711737][T17625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.728603][T17778] tipc: Enabled bearer , priority 0 [ 598.754093][T17780] bond2: entered promiscuous mode [ 598.759866][T17780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.767059][T17781] syzkaller0: entered promiscuous mode [ 598.773039][T17781] syzkaller0: entered allmulticast mode [ 598.782328][T17780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2972'. [ 598.820677][T17780] bond2: entered allmulticast mode [ 598.829068][T17773] wg1 speed is unknown, defaulting to 1000 [ 598.917385][T17625] hsr_slave_0: entered promiscuous mode [ 598.924347][T17625] hsr_slave_1: entered promiscuous mode [ 598.931887][T17625] debugfs: 'hsr0' already exists in 'hsr' [ 598.937711][T17625] Cannot create hsr debugfs directory [ 598.943848][T17777] tipc: Resetting bearer [ 598.965692][T17777] tipc: Disabling bearer [ 598.998012][T17786] bond2: (slave bridge1): making interface the new active one [ 599.005896][T17786] bridge1: entered promiscuous mode [ 599.011910][T17786] bridge1: entered allmulticast mode [ 599.018610][T17786] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 599.101797][ T569] IPVS: stop unused estimator thread 0... [ 599.161253][T17788] dvmrp12: entered allmulticast mode [ 599.211200][T17787] dvmrp12: left allmulticast mode [ 599.465521][ T30] audit: type=1800 audit(1766230159.982:7): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2977" name="3" dev="tmpfs" ino=3010 res=0 errno=0 [ 599.670702][T17813] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 599.679881][T17814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2981'. [ 599.703975][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'. [ 599.716462][T17817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2982'. [ 599.741185][T17812] netlink: 'syz.4.2980': attribute type 30 has an invalid length. [ 599.742311][T17813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 599.768246][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'. [ 599.939970][ T52] Bluetooth: hci1: command tx timeout [ 600.003308][T17820] wg1 speed is unknown, defaulting to 1000 [ 600.222353][T17838] netlink: 'syz.4.2989': attribute type 40 has an invalid length. [ 600.393557][T17625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 600.414758][T17625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 600.451918][T17625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 600.472571][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 600.478891][T17625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 600.670587][T17870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2997'. [ 600.912575][T17625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.003145][T17625] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.064812][T15678] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.072102][T15678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.143109][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.150367][ T6884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.191139][T17892] xt_connbytes: Forcing CT accounting to be enabled [ 601.277919][T17892] xt_CT: No such helper "syz1" [ 601.298087][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3006'. [ 601.401027][T17892] xt_limit: Overflow, try lower: 271964/0 [ 601.422088][T17906] xt_TCPMSS: Only works on TCP SYN packets [ 601.519948][T17908] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3003'. [ 602.019720][ T52] Bluetooth: hci1: command tx timeout [ 602.460929][T17625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.586965][T17925] netlink: 1208 bytes leftover after parsing attributes in process `syz.0.3011'. [ 602.802342][T17937] netlink: 'syz.4.3014': attribute type 13 has an invalid length. [ 603.118841][T17625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.253392][T17625] veth0_vlan: entered promiscuous mode [ 603.273882][T17625] veth1_vlan: entered promiscuous mode [ 603.404743][T17625] veth0_macvtap: entered promiscuous mode [ 603.451443][T17625] veth1_macvtap: entered promiscuous mode [ 603.593203][T17625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.652299][T17963] wg1 speed is unknown, defaulting to 1000 [ 603.702654][T17625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.816932][T15683] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.828050][T15683] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.897263][T15683] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.954301][T15683] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.467097][T17983] syzkaller1: entered promiscuous mode [ 604.479717][T17983] syzkaller1: entered allmulticast mode [ 604.583278][T15680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.598832][T17984] syzkaller1: left promiscuous mode [ 604.605730][T17984] syzkaller1: left allmulticast mode [ 604.611046][T15680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.734826][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'. [ 604.826623][T15683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.846508][T15683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.260634][T18021] : option downdelay: invalid value (18446744073709547007) [ 605.268398][T18021] : option downdelay: allowed values 0 - 2147483647 [ 605.279164][T18021] (unregistering): Released all slaves [ 605.520896][T18033] nbd: nbd1 already in use [ 605.844897][T18046] bond0: (slave rose0): Error: Device can not be enslaved while up [ 605.938011][ T5942] wg1 speed is unknown, defaulting to 1000 [ 605.968603][ T5942] syz: Port: 1 Link ACTIVE [ 606.075790][T18057] netlink: 'syz.5.3041': attribute type 8 has an invalid length. [ 606.084924][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.180726][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 606.189962][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 606.202412][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 606.210926][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 606.290445][T18064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3043'. [ 606.299720][T18064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3043'. [ 606.383321][T18058] wg1 speed is unknown, defaulting to 1000 [ 606.562050][T18074] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 606.579898][T18074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.591491][T18080] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3048'. [ 606.627581][T18070] wg1 speed is unknown, defaulting to 1000 [ 606.727385][T18080] tipc: Started in network mode [ 606.746705][T18080] tipc: Node identity 428025451b01, cluster identity 4711 [ 606.758865][T18080] tipc: Enabled bearer , priority 0 [ 606.800982][T18080] syzkaller0: entered promiscuous mode [ 606.806977][T18080] syzkaller0: entered allmulticast mode [ 606.822939][T18082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3048'. [ 607.418352][T18078] tipc: Resetting bearer [ 607.483272][T18078] tipc: Disabling bearer [ 607.529155][T18106] wg1 speed is unknown, defaulting to 1000 [ 607.594515][T18058] chnl_net:caif_netlink_parms(): no params data found [ 607.759205][T18127] syzkaller1: entered promiscuous mode [ 607.767955][T18127] syzkaller1: entered allmulticast mode [ 607.794623][T18130] xt_TCPMSS: Only works on TCP SYN packets [ 607.905341][T18135] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 607.936443][T15680] bridge_slave_1: left allmulticast mode [ 607.947783][T15680] bridge_slave_1: left promiscuous mode [ 607.954550][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.967198][T15680] bridge_slave_0: left allmulticast mode [ 607.977806][T15680] bridge_slave_0: left promiscuous mode [ 607.989616][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.272801][ T5829] Bluetooth: hci2: command tx timeout [ 608.856490][T15680] bond2 (unregistering): (slave gretap1): Releasing active interface [ 610.349891][ T5829] Bluetooth: hci2: command tx timeout [ 610.550418][T15680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.561624][T15680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.573674][T15680] bond0 (unregistering): (slave 0!): Releasing backup interface [ 610.588022][T15680] bond0 (unregistering): Released all slaves [ 610.711286][T15680] bond1 (unregistering): Released all slaves [ 610.827413][T15680] bond2 (unregistering): Released all slaves [ 610.948472][T15680] bond3 (unregistering): Released all slaves [ 611.067621][T15680] bond4 (unregistering): Released all slaves [ 611.081055][T15680] bond5 (unregistering): Released all slaves [ 611.199454][T15680] bond6 (unregistering): Released all slaves [ 611.213499][T15680] bond7 (unregistering): Released all slaves [ 611.228206][T15680] bond8 (unregistering): Released all slaves [ 611.348458][T15680] bond9 (unregistering): (slave veth9): Releasing active interface [ 611.358749][T15680] bond9 (unregistering): Released all slaves [ 611.724655][T15680] tipc: Left network mode [ 611.739498][T18058] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.747307][T18058] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.763525][T18058] bridge_slave_0: entered allmulticast mode [ 611.772258][T18058] bridge_slave_0: entered promiscuous mode [ 611.786688][T15680] IPVS: stopping backup sync thread 16354 ... [ 611.808556][T18058] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.840169][T18058] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.847778][T18058] bridge_slave_1: entered allmulticast mode [ 611.863378][T18058] bridge_slave_1: entered promiscuous mode [ 611.971165][T18155] wg1 speed is unknown, defaulting to 1000 [ 612.035734][T18058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.064892][T18058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.102705][T18158] wg1 speed is unknown, defaulting to 1000 [ 612.174756][T18163] wg1 speed is unknown, defaulting to 1000 [ 612.178716][T18058] team0: Port device team_slave_0 added [ 612.215091][T18058] team0: Port device team_slave_1 added [ 612.397872][T18172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 612.413506][T18058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.420902][T18058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.431314][ T5829] Bluetooth: hci2: command tx timeout [ 612.447750][T18058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.472038][T18173] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3068'. [ 612.528031][T18058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.548186][T18058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.598889][T18058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.034669][T18197] Unsupported ieee802154 address type: 0 [ 613.192130][T18058] hsr_slave_0: entered promiscuous mode [ 613.200896][T18058] hsr_slave_1: entered promiscuous mode [ 613.209731][T18058] debugfs: 'hsr0' already exists in 'hsr' [ 613.215748][T18058] Cannot create hsr debugfs directory [ 613.391302][T15680] hsr_slave_0: left promiscuous mode [ 613.403477][T15680] hsr_slave_1: left promiscuous mode [ 613.414320][T15680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.427182][T15680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.457357][T15680] pimreg (unregistering): left allmulticast mode [ 613.583470][T18217] netlink: 'syz.1.3081': attribute type 8 has an invalid length. [ 613.893570][T18220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3082'. [ 614.321926][T15680] ` (unregistering): Port device team_slave_1 removed [ 614.403624][T15680] ` (unregistering): Port device team_slave_0 removed [ 614.500558][ T5829] Bluetooth: hci2: command tx timeout [ 614.803453][T15680] ! (unregistering): left allmulticast mode [ 615.092783][T18238] netlink: 'syz.4.3084': attribute type 1 has an invalid length. [ 615.101926][T18238] netlink: 'syz.4.3084': attribute type 2 has an invalid length. [ 616.865616][T18238] netlink: 'syz.4.3084': attribute type 1 has an invalid length. [ 617.231654][T18263] xt_connbytes: Forcing CT accounting to be enabled [ 617.241749][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 617.268615][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 617.285991][T18266] netlink: 'syz.1.3091': attribute type 2 has an invalid length. [ 617.294848][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 617.319919][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 617.344918][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3090'. [ 617.346968][T18266] !9: entered promiscuous mode [ 617.355412][T15680] IPVS: stop unused estimator thread 0... [ 617.363033][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 617.403617][T18263] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 617.418657][T18266] netlink: 'syz.1.3091': attribute type 2 has an invalid length. [ 617.436693][T18266] !9: left promiscuous mode [ 618.511645][T18300] wg1 speed is unknown, defaulting to 1000 [ 618.729790][T18327] tipc: Enabled bearer , priority 0 [ 618.874903][T18325] tipc: Disabling bearer [ 618.937635][T18058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 618.971199][T18058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 619.023741][T18334] netlink: 'syz.5.3103': attribute type 1 has an invalid length. [ 619.039076][T18058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 619.075070][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3104'. [ 619.075472][T18334] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 619.093946][T18058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 619.095438][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'. [ 619.120913][T18339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3104'. [ 619.132561][T18343] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3105'. [ 619.144793][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3105'. [ 619.185973][T18344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3105'. [ 619.206820][T18351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3105'. [ 619.371028][T18343] vlan2: entered allmulticast mode [ 619.376215][T18343] dummy0: entered allmulticast mode [ 619.388153][T18343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3105'. [ 619.400505][T18355] openvswitch: netlink: Tunnel attr 193 out of range max 16 [ 619.430842][T18355] netlink: 'syz.5.3107': attribute type 12 has an invalid length. [ 619.460838][T18355] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3107'. [ 619.569959][T18365] netlink: 'syz.5.3110': attribute type 6 has an invalid length. [ 619.589751][T18365] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3110'. [ 619.590235][T18369] siw: device registration error -23 [ 619.804547][T18058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.856759][T18058] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.896914][T15683] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.904251][T15683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.935658][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.942990][ T9062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.428054][T18401] gretap0: left promiscuous mode [ 620.444593][T18406] [ 620.447308][T18406] ============================= [ 620.452326][T18406] WARNING: suspicious RCU usage [ 620.457293][T18406] syzkaller #0 Not tainted [ 620.462509][T18406] ----------------------------- [ 620.467392][T18406] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 620.476283][T18406] [ 620.476283][T18406] other info that might help us debug this: [ 620.476283][T18406] [ 620.486768][T18406] [ 620.486768][T18406] rcu_scheduler_active = 2, debug_locks = 1 [ 620.495574][T18406] 1 lock held by syz.4.3118/18406: [ 620.501023][T18406] #0: ffffffff8df41c00 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 620.511449][T18406] [ 620.511449][T18406] stack backtrace: [ 620.517633][T18406] CPU: 0 UID: 0 PID: 18406 Comm: syz.4.3118 Not tainted syzkaller #0 PREEMPT(full) [ 620.517662][T18406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 620.517672][T18406] Call Trace: [ 620.517680][T18406] [ 620.517687][T18406] dump_stack_lvl+0x189/0x250 [ 620.517715][T18406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.517734][T18406] ? __pfx__printk+0x10/0x10 [ 620.517754][T18406] ? __lock_acquire+0x6b6/0x2cf0 [ 620.517783][T18406] lockdep_rcu_suspicious+0x140/0x1d0 [ 620.517805][T18406] get_callchain_entry+0x2b6/0x3c0 [ 620.517831][T18406] get_perf_callchain+0xb3/0x820 [ 620.517858][T18406] ? __pfx_get_perf_callchain+0x10/0x10 [ 620.517880][T18406] ? futex_unqueue+0x22/0x240 [ 620.517894][T18406] ? futex_unqueue+0x22/0x240 [ 620.517912][T18406] ? futex_unqueue+0x22/0x240 [ 620.517931][T18406] __bpf_get_stack+0x45b/0xaa0 [ 620.517960][T18406] ? __pfx___bpf_get_stack+0x10/0x10 [ 620.517993][T18406] bpf_get_stack+0x33/0x50 [ 620.518012][T18406] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 620.518027][T18406] bpf_get_stack_raw_tp+0x1a9/0x220 [ 620.518051][T18406] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 620.518066][T18406] bpf_prog_run_pin_on_cpu+0x143/0x480 [ 620.518094][T18406] bpf_prog_test_run_syscall+0x312/0x4b0 [ 620.518116][T18406] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 620.518135][T18406] ? __fget_files+0x2a/0x420 [ 620.518159][T18406] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 620.518179][T18406] bpf_prog_test_run+0x2c7/0x340 [ 620.518204][T18406] __sys_bpf+0x562/0x860 [ 620.518226][T18406] ? __pfx___sys_bpf+0x10/0x10 [ 620.518264][T18406] ? rcu_is_watching+0x15/0xb0 [ 620.518290][T18406] __x64_sys_bpf+0x7c/0x90 [ 620.518309][T18406] do_syscall_64+0xfa/0xf80 [ 620.518327][T18406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.518342][T18406] ? clear_bhb_loop+0x60/0xb0 [ 620.518359][T18406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.518374][T18406] RIP: 0033:0x7f86f6f8f749 [ 620.518388][T18406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.518401][T18406] RSP: 002b:00007f86f7da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.518418][T18406] RAX: ffffffffffffffda RBX: 00007f86f71e5fa0 RCX: 00007f86f6f8f749 [ 620.518429][T18406] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 620.518438][T18406] RBP: 00007f86f7013f91 R08: 0000000000000000 R09: 0000000000000000 [ 620.518447][T18406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.518456][T18406] R13: 00007f86f71e6038 R14: 00007f86f71e5fa0 R15: 00007ffd11a9e9a8 [ 620.518490][T18406] [ 620.899103][T18401] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.912119][T18401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.932370][T18407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.994315][T18058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.036366][T18058] veth0_vlan: entered promiscuous mode [ 621.047786][T18058] veth1_vlan: entered promiscuous mode [ 621.081014][T18058] veth0_macvtap: entered promiscuous mode [ 621.093779][T18058] veth1_macvtap: entered promiscuous mode [ 621.126923][T18058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.144025][T18058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.159173][T15678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.170315][T15678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.179212][T15678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.188436][T15678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.261453][T15678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.269823][T15678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.298273][ T9076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.307607][ T9076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.593217][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 630.109366][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 630.117492][ C1] lec:lec_tx_timeout: lec0